How is everyone handling input sanitization to prevent XSS and such?
Seems that maybe there is no current sanitation of inputs when using TextInput::make.
Any best practices?
2 Replies
I think XSS would be handled at the template level, with
{{ $value }}. You could probably run something like htmlspecialchars before the value is stored in the DB if you prefer.Thanks, thats what I'll do, just wasn't sure if there was a better way or a Filament way