Homec4science

Kill most of phutil_escape_html()

Authored by vrana <jakubv@fb.com> on Feb 9 2013, 23:43.

Description

Kill most of phutil_escape_html()

Summary:
This resolves lots of double escaping.
We changed most of phutil_render_tag(, , $s) to phutil_tag(, , $s) which means that $s is now auto-escaped.
Also pht() auto escapes if it gets PhutilSafeHTML.

Test Plan: None.

Reviewers: epriestley

Reviewed By: epriestley

CC: aran, Korvin

Maniphest Tasks: T2432

Differential Revision: https://secure.phabricator.com/D4889

Details

Committed
vrana <jakubv@fb.com>Feb 12 2013, 00:27
Pushed
aubortJan 31 2017, 17:16
Parents
rPH9b8da7376550: Convert AphrontTableView to safe HTML
Branches
Unknown
Tags
Unknown

Event Timeline

vrana <jakubv@fb.com> committed rPHa22ef4e9b472: Kill most of phutil_escape_html() (authored by vrana <jakubv@fb.com>).Feb 12 2013, 00:27