Open ninsuo opened 9 years ago
Can be useful to add a "Show HTML result" button to interpret HTML results instead of displaying text. See: http://twigfiddle.com/e88llr
Should wrap the feature inside an iframe endpointed elsewhere than on twigfiddle.com to secure against xss using cross origin request policies.
:+1: The iframe is a good idea. You can use a subdomain for the XSS issue.
@GromNaN a subdomain is allowed to mess with the top-level domain cookies
This tool supports HTML rendering https://fiddle.nette.org/twig/
Can be useful to add a "Show HTML result" button to interpret HTML results instead of displaying text. See: http://twigfiddle.com/e88llr
Should wrap the feature inside an iframe endpointed elsewhere than on twigfiddle.com to secure against xss using cross origin request policies.