1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

XF 1.5 thread title character escaping

Discussion in 'XenForo Questions and Support' started by Sythe, May 28, 2016.

  1. Sythe

    Sythe Member

    can anyone tell me where in xenforo thread titles get escaped/htmlspecialchars applied?

    it is done on POST I assume?
     
  2. Mike

    Mike XenForo Developer Staff Member

    Escaping is done in a context-sensitive way on display.
     
  3. Sythe

    Sythe Member

    Thanks Mike I installed a clean test copy just to verify that

    So when {$thread.title} is used in various places in the template system is that already escaped before printing or does the template system decide to escape it when it sees {$x} as opposed to for example {xen:helper xyz, $x}?
     
  4. Mike

    Mike XenForo Developer Staff Member

    The template system is what does the escaping (by default).
     

Share This Page