F
Filament12mo ago
_jimmy

How is everyone handling input sanitization to prevent XSS and such?

Seems that maybe there is no current sanitation of inputs when using TextInput::make. Any best practices?
2 Replies
Patrick Boivin
Patrick Boivin12mo ago
I think XSS would be handled at the template level, with {{ $value }}. You could probably run something like htmlspecialchars before the value is stored in the DB if you prefer.
_jimmy
_jimmy12mo ago
Thanks, thats what I'll do, just wasn't sure if there was a better way or a Filament way