search

rsanchez / resource_router

Resource Router for ExpressionEngine
MIT License
48 stars 12 forks source link

Add property to store XSS-cleaned wildcard value and magic method to retrieve it. #28

Closed kevinsmith closed 5 years ago

kevinsmith commented 8 years ago

I'm sure that like me, lots of folks are using these values in custom DB queries. Since user-input values should never be used in queries without sanitizing them, it makes sense to provide an XSS-cleaned version of the wildcard value.

And since xss_clean() has some overhead, we're holding off on doing it until the first time the property is requested.

robsonsobral commented 8 years ago

This looks indeed very useful.