Attention
TYPO3 v9 has reached its end-of-life September 30th, 2021 and is not maintained by the community anymore. Looking for a stable version? Use the version switch on the top left.
You can order Extended Long Term Support (ELTS) here: TYPO3 ELTS.
format.cdata¶
Outputs an argument/value without any escaping and wraps it with CDATA tags.
PAY SPECIAL ATTENTION TO SECURITY HERE (especially Cross Site Scripting), as the output is NOT SANITIZED!
= Examples =
<code title="Child nodes"> <f:format.cdata>{string}</f:format.cdata> </code> <output> <![CDATA[(Content of {string} without any conversion/escaping)]]> </output>
<code title="Value attribute"> <f:format.cdata value="{string}" /> </code> <output> <![CDATA[(Content of {string} without any conversion/escaping)]]> </output>
<code title="Inline notation"> {string -> f:format.cdata()} </code> <output> <![CDATA[(Content of {string} without any conversion/escaping)]]> </output>