php/yii2
1
0
Fork 0
mirror of https://github.com/yiisoft/yii2.git synced 2025-08-26 14:26:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

docs/guide/security-best-practices.md - minor fix [ci skip]

Browse Source
This commit is contained in:
Nobuo Kihara
2014-12-23 08:26:21 +09:00
parent 91f4375454
commit 5549149433
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/guide/security-best-practices.md
View File

@ -33,7 +33,7 @@ In Yii, most probably you'll use [form validation](input-validation.md) to do al
Escape output means that depending on context where we're using data it should be escaped i.e. in context of HTML you Escape output means that depending on context where we're using data it should be escaped i.e. in context of HTML you
should escape `<`, `>` and alike special characters. In context of JavaScript or SQL it will be different set of characters. should escape `<`, `>` and alike special characters. In context of JavaScript or SQL it will be different set of characters.
Since it's error-prone to escape everything automatically Yii provides various tools to perform escaping for different Since it's error-prone to escape everything manually Yii provides various tools to perform escaping for different
contexts. contexts.
Avoiding SQL injections Avoiding SQL injections