mirrors/nextcloud-documentation
3
0
Fork 0
mirror of https://github.com/nextcloud/documentation.git synced 2025-10-26 11:18:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

added changed in version for warning

Browse Source
This commit is contained in:
Bernhard Posselt 2012-10-30 17:07:58 +01:00
parent 7212c3f835
commit a2ef5f9bf0
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
developer_manual/templates.rst
View File

@ -8,8 +8,11 @@ Templates
.. sectionauthor:: Bernhard Posselt <nukeawhale@gmail.com>
.. warning::
.. versionchanged:: 5.0
To prevent XSS the following PHP **functions for printing are forbidden: echo, print() and <?=**. Instead use ``p($data)`` for printing your values. Should you require unescaped printing, **double check for XSS** and use: ``print_unescaped($data)``.
.. warning::
Templates **must not contain database queries**! All data should be passed to the template via ``$template->assign($key, $value)``.