| 148 |
lars |
1 |
\$escape\_html {#variable.escape.html}
|
|
|
2 |
==============
|
|
|
3 |
|
|
|
4 |
Setting `$escape_html` to TRUE will escape all template variable output
|
|
|
5 |
by wrapping it in
|
|
|
6 |
`htmlspecialchars({$output}, ENT_QUOTES, $char_set);`,
|
|
|
7 |
which is the same as `{$variable|escape:"html"}`.
|
|
|
8 |
|
|
|
9 |
Template designers can choose to selectively disable this feature by
|
|
|
10 |
adding the `nofilter` flag: `{$variable nofilter}`.
|
|
|
11 |
|
|
|
12 |
Modifiers and Filters are run in the following order: modifier,
|
|
|
13 |
default\_modifier, \$escape\_html, registered variable filters,
|
|
|
14 |
autoloaded variable filters, template instance\'s variable filters.
|
|
|
15 |
Everything except the individual modifier can be disabled with the
|
|
|
16 |
`nofilter` flag.
|
|
|
17 |
|
|
|
18 |
> **Note**
|
|
|
19 |
>
|
|
|
20 |
> This is a compile time option. If you change the setting you must make
|
|
|
21 |
> sure that the templates get recompiled.
|