For Form Editor xml, should we use filter="safehtml" or filter="JComponentHelper::filterText"
Pl advise - which is better filter and safe
Joomla Stack Exchange is a question and answer site for Joomla! administrators, users, developers and designers. It only takes a minute to sign up.
Sign up to join this communityFor Form Editor xml, should we use filter="safehtml" or filter="JComponentHelper::filterText"
Pl advise - which is better filter and safe
As far as I can tell from looking at the codebase, both end up filtering the code through JFilterInput::getInstance()->clean();
, which checks the html is safe.
The main difference seems to be that JComponentHelper::filterText
has some additional filtering to limit the html to a bespoke whitelist/blacklist.
Both should be secure. The latter may have more flexibility should you need it.