ninsuo / twigfiddle

twigfiddle.com provides a small development environment to develop, run, store and access Twig code online.
https://twigfiddle.com
MIT License
138 stars 14 forks source link

Support displaying results as HTML #3

Open ninsuo opened 9 years ago

ninsuo commented 9 years ago

Can be useful to add a "Show HTML result" button to interpret HTML results instead of displaying text. See: http://twigfiddle.com/e88llr

Should wrap the feature inside an iframe endpointed elsewhere than on twigfiddle.com to secure against xss using cross origin request policies.

GromNaN commented 9 years ago

:+1: The iframe is a good idea. You can use a subdomain for the XSS issue.

stof commented 9 years ago

@GromNaN a subdomain is allowed to mess with the top-level domain cookies

sylfabre commented 2 years ago

This tool supports HTML rendering https://fiddle.nette.org/twig/