Le 11/03/2011 01:37, Bernhard Schussek a écrit :
2011/3/11 Christophe COEVOET<[email protected]>:
In your case, I guess that {{ field.errors }} returns some HTML code from
what I see in the slides. How does it work with Twig autoescaping ? A method
call on an abject cannot be marked as safe so it will be {{ form.errors|raw
}} unless you disable the autoescaping when rendering a form but this is
really bad IMHO.
If you use TwigTheme, autoescaping in Twig templates is taken care of
automatically.

Bernhard
What is shown in the slides uses {{ field.errors }} or {{ field.widget }} which will be escaped as it is a call on a method of the object which cannot be declared as safe. so what is the way to use the TwigTheme which is not presented in your slides ? The current extension you want to remove according to your previous message ?

--
Christophe | Stof

--
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en

Reply via email to