| With some recent security advisories for Cross Site Scripting (XSS), it feels like an opportune time to remind those who author Twig templates for Drupal: If you’re using Twig’s | raw filter, you’re probably doing it wrong by lee.rowlands / 7 September 2026 Background Let’s cast our minds back to Drupal 7. A time before twig. We had .tpl.php templates with PHP template as the default templating engine. |
PreviousNext: If you're using Twig's raw filter with Drupal, you're doing it wrong
calendar_today
September 6, 2026
domain
drupal