Laravel 4's Input class filtering outside the framework

Question

At the moment, when I post some JS, the JS is executed when I print the input to the screen.

Right now I use:

$post = Input::createFromGlobals();

I would like to know how I can filter the user input. Is this something I have to do manually, or with some other class?

While I don't know the answer to your question, I should mention that the ``createFromGlobals`` method actually comes from ``Symfony\Component\HttpFoundation\Request`` and not from Laravel in itself. I've added a tag to reflect this. Hope you get the answer from somebody! — Joel Hinz, Jun 05 '14 at 13:51

score 1 · Accepted Answer · answered Jun 05 '14 at 16:00

You'll have to do this manually. Laravel support helpers provides function e which will run the input through htmlentities and escape html tags.

If you dont want to use illuminate/support package then you can manually send the input through htmlentities function.

Here is the method from Illuminate/Support helper.php file:

function e($value)
{
    return htmlentities($value, ENT_QUOTES, 'UTF-8', false);
}

1 Answers1