HTML escape a text. Escapes all reserved HTML characters in the value. Escaped strings are safe to be displayed in a HTML page. When you echo a query string argument or path variable then you must escape the value before displaying it on a HTML page.
The following characters are replaced:
Character | Replacement |
> | > |
< | < |
" | " |
' | ' |
& | & |
The escaping is only applied when the string is output, so it does not matter where in a chained sequence of filters you put escape: it will always be applied as though it were the last filter. If you want escaping to be applied immediately, use the force_escape filter.
For example:
{{ value|escape }}
When the value is <hel&lo> then the output is <hel&lo>.
Note: this filter is not part of a module, it is built into ErlyDTL.