How to unescape html in slightly | Community
Skip to main content
This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Feike_Visser1
Feike_Visser1Accepted solution
Employee
October 16, 2015

${ yourValue @ context='unsafe'} will unescape.

Avoid using this to not introduce XSS issues.

3 replies

Feike_Visser1
Feike_Visser1Accepted solution
Employee
October 16, 2015

${ yourValue @ context='unsafe'} will unescape.

Avoid using this to not introduce XSS issues.

Translate
WhoaShekhar
Level 10
October 16, 2015

Hi There,

Thank you for reaching out to Adobe Community.

Please go through the below link to see if it helps:

http://docs.adobe.com/content/docs/en/aem/6-0/develop/sightly.html

This is the entire documentation for sightly.

thanks!

Translate
knicksak2
Level 2
October 16, 2015

What Feike said was correct however by using context='unsafe' you are disabling escaping and XSS protection completely. By using context='html' it filters the HTML to meet the AntiSamy policy rules, removing what doesn't match the rules. By doing this you still have some XSS protection instead of disabling it completely.

Translate