HomePhorge

Kill most of phutil_escape_html()

Description

Kill most of phutil_escape_html()

Summary:
This resolves lots of double escaping.
We changed most of phutil_render_tag(, , $s) to phutil_tag(, , $s) which means that $s is now auto-escaped.
Also pht() auto escapes if it gets PhutilSafeHTML.

Test Plan: None.

Reviewers: epriestley

Reviewed By: epriestley

CC: aran, Korvin

Maniphest Tasks: T2432

Differential Revision: https://secure.phabricator.com/D4889

Details

Provenance
vranaAuthored on Feb 9 2013, 2:43 PM
themackabuPushed on Mar 25 2025, 8:07 PM
Parents
rP9b8da7376550: Convert AphrontTableView to safe HTML
Branches
Unknown
Tags
Unknown

Event Timeline