twigfiddle.com - Fiddle d0w2yt v1 - Created on July 30, 2021 12:35

More options...

Title

File

No output encoding:

<style>
  .box1 { background: {{ color1|raw }} }
  .box2 { background: {{ color2|raw }} }
</style>

[…]

<div class="box1">{{ color1|raw }}</div>
<div class="box2">{{ color2|raw }}</div>


------


Context-dependent output encoding:

<style>
  .box1 { background: {{ color1|e('css') }} }
  .box2 { background: {{ color2|e('css') }} }
</style>

[…]

<div class="box1">{{ color1|e('html') }}</div>
<div class="box2">{{ color2|e('html') }}</div>

Format

color1: 'red; } { body: display:none;'
color2: '<script>alert(1)</script>'

Fiddle d0w2yt created on July 30, 2021 12:35 and visited 340 times

Developed using

Not logged in.

twigfiddle.com @ 2024
Ask a question on Stackoverflow Report issue Download source code