[Flow] Fluid escaping interceptor not called when rendering view helpers with shorthand syntax

Bastian Waidelich bastian at typo3.org
Thu Jul 3 11:35:42 CEST 2014


Helmut Hummel wrote:

Hi Helmut,

>> The shorthand syntax is not correct like this [...]

> Well, this is off topic to my question

Sorry, I didn't try to be a smart aleck about it, I just misread your 
question and thought you wondered about a different output.


> Yes, it is the case also for me. What I am saying is that it might not
> be what a user might expect.

I'm with you now. But I'm not sure what to do about it.
The rule "as soon as you use a VH the automatic escaping is disabled" 
makes sense I think and changing the uri.* ViewHelpers to escape their 
result would also be confusing IMO.

Changing the behavior depending on the context could also be very 
misleading and difficult to comprehend[1].


I would suggest to communicate the current behavior *very clearly and 
visible* in the templating documentation[2] and promote ways to 
circumvent problems up front.
For example it's not very known that in Flow you can just write:

<link rel="stylesheet" href="../../../Public/Styles.css" />

Luckily the issue does not seem to be relevant for resources, because 
the FileSystemPublishingTarget already escapes the filename 
("Some"Res&rce.txt" gets "SomeResrce.txt").



[1] That we already change the global behavior based on the request 
format (disabling the escape interceptors for non-html) is already 
confusing for people and maybe it was a mistake to do so.. (at least 
they're about to be configurable with https://review.typo3.org/24551).

[2] 
http://docs.typo3.org/flow/TYPO3FlowDocumentation/TheDefinitiveGuide/PartIII/Templating.html

-- 
Bastian Waidelich


More information about the Flow mailing list