twigfiddle.com - Avoid XSS pitfalls in Twig

More options...

Title

File

{% set author_with_link %}
    {{ book.author }} <a href="#">edit</a>
{% endset %}

{{ _self.list([book.title, author_with_link])}}

{% macro list(items) %}
	<ul>
  	{% for item in items %}
    	<li>{{ item }}</li>
    {% endfor %}
  </ul>
{% endmacro %}

  {% autoescape %}
    <div style="text-align: center">{{ book.author |raw }}</div>
    {% endautoescape %}

Format

book:
    author: Herman Melville <script>alert('pwnd')</script>
    title: Moby-Dick; or, The Whale

Fiddle k1nvsd v7 created on March 20, 2023 11:57 and visited 22 times

Developed using

Not logged in.

twigfiddle.com @ 2023
Ask a question on Stackoverflow Report issue Download source code