Heads up! To view this whole video, sign in with your Courses account or enroll in your free 7-day trial. Sign In Enroll

Templating with Twig

Preview

Start a free Courses trial
to watch this video

Sign up for Treehouse

Escaping and Comments

3:53 with Alena Holligan

By default twig escapes output. This is great for security, so you don't have to worry so much about user entered data. Comments are useful for debugging or to add information for other template designers or yourself.

HTML Escaping

When generating HTML from templates, there's always a risk that a variable will include characters that affect the resulting HTML. There are two approaches: manually escaping each variable or automatically escaping everything by default.

Twig supports both, automatic escaping is enabled by default.

The automatic escaping strategy can be configured via the autoescape option and defaults to html.

Comments

To Comment-out part of a line in a template, use the comment syntax {# ... #}. This is useful for debugging or to add information for other template designers or yourself.

Related Discussions

Have questions about this video? Start a discussion with the community and Treehouse staff.

Sign up

    Related Discussions

    Have questions about this video? Start a discussion with the community and Treehouse staff.

    Sign up

    By default, Twig escapes output. 0:01
    This is great for security, so you don't have to worry so 0:04
    much about user-entered data. 0:07
    You can change the default, but that's not really what we want in this case. 0:10
    We just want to control which items are escaped. 0:14
    I can use another filter for 0:17
    specifying the escape by adding a pipe. 0:20
    We can pipe raw to specify that we want to leave the raw html. 0:25
    Let's add this to my other filters. 0:35
    Now I see my text emphasized instead of showing the tags. 0:43
    Except that again, my first concatenated variable does not filter. 0:46
    There are other escape types as well. 0:52
    So take a look in the documentation if you're looking for 0:54
    something more specific. 0:57
    One more I want to show you. 0:59
    If you're just using this string without a filter. 1:02
    That string is not escaped. 1:12
    I actually see the HTML tags being used. 1:14
    I probably would not use a Twig block for this, but 1:19
    I wanted to make you aware of how this works. 1:23
    The other thing that's not working the way I want is white space. 1:26
    PHP doesn't really pay attention to white space, but 1:29
    Twig is a little more like HTML. 1:33
    It may not affect the functionality, but 1:35
    it does add spaces where I may not want them. 1:38
    I can add a dash to either side of the Twig tags to remove the white spaces 1:41
    when it renders the HTML. 1:46
    Remove the white space on the left, And remove the white space on the right. 1:50
    For my filter, I can actually add the dash to the command 1:59
    since there isn't a display tag within here. 2:05
    Great, there's no longer any spaces between my words. 2:13
    We have seen how to show and use HTML tags. 2:16
    But what if we want to show the Twig tags? 2:20
    We can do this in one of two ways. 2:24
    We can put the tags within quotes. 2:28
    Maybe even showing our variable. 2:34
    Or we can use the verbatim command, 2:39
    command tags verbatim. 2:44
    And close the command, endverbatim. 2:59
    Now we see name and name with our Twig tags. 3:08
    Remember how I said Twig uses two different tags? 3:14
    Well, there's actually a third. 3:18
    A curly brace with a pound sign is used for comments. 3:20
    We're going to surround all these 3:24
    examples with our comments tag, {#. 3:30
    Then we'll go to the end and add #}. 3:36
    Great, now we're ready to configure the actual functionality of 3:43
    the site using control structures, built-in functions and arrays. 3:48

    You need to sign up for Treehouse in order to download course files.

    Sign up

      You need to sign up for Treehouse in order to set up Workspace

      Sign up