NgRest Text and Textarea auto encoding

[nadar]

The text and textarea plugins will now auto encode html output on after find, this may cause into problems with existing implentations are handing json trough textarea or text plugin!

In order to fix that use

['text', 'encoding' => false], // ['textarea', 'encoding' => false]

in order to disable encoding

[dev7ch]

Does this mean that an <a href="">blah</a> wouldn´t work anymore in the textarea block too?

[dev7ch]

i guess it would be possible for particular cases with ['textarea', 'encoding' => true]

• in some cases it usefull to use html in a textarea block instead of adding an extra html block
• even in some title field where one word is bold is html needed in a text field

[nadar]

Yes ngrest plugins text and textarea will encode the html output, but before parsing the markdown syntax.

you can either disable this behavior with 'encoding' => false or us the Html plugin.

The implementation of such a feature helps us prevent xss attacks when working with user input.

[dev7ch]

ok thank you.