From 8581206826180f35b50399cb3150d95afa09208c Mon Sep 17 00:00:00 2001 From: Andy Fowlston Date: Mon, 20 Feb 2023 16:33:50 +0000 Subject: [PATCH] Fix autoescaping for Twig 2.x Twig 1 and 2 both have an autoescape constructor parameter. In 1.x passing false was the same as passing 'html'. In 2.x you must explicitly pass 'html'. See - https://github.com/twigphp/Twig/blob/0887422319889e442458e48e2f3d9add1a172ad5/src/Environment.php#L111 - https://github.com/twigphp/Twig/blob/872646a70ff83b3628d50c9bafa117af9f1da59e/src/Environment.php#L92 Closes #102. --- src/TwigRenderer.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/TwigRenderer.php b/src/TwigRenderer.php index 43eefae..bb95441 100644 --- a/src/TwigRenderer.php +++ b/src/TwigRenderer.php @@ -49,7 +49,7 @@ function __construct(array $config) { private function createTwigEnv($loaders) { $twig = new \Twig_Environment($loaders, [ 'debug' => $this->config['debug'], - 'autoescape' => $this->config['autoescape'], + 'autoescape' => $this->config['autoescape'] ? 'html' : false, 'cache' => false, // @todo Implement Twig caching ]);