0

For Form Editor xml, should we use filter="safehtml" or filter="JComponentHelper::filterText"

Pl advise - which is better filter and safe

0

1 Answer 1

3

As far as I can tell from looking at the codebase, both end up filtering the code through JFilterInput::getInstance()->clean();, which checks the html is safe.

The main difference seems to be that JComponentHelper::filterText has some additional filtering to limit the html to a bespoke whitelist/blacklist.

Both should be secure. The latter may have more flexibility should you need it.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.