BrainBuzzer
How to use normal characters instead of entities from `Poison.encode!/2`?
Hey guys. I’m trying to get the proper array as a response in one of my eex files. So what I want as a response is this: ["User 1", "User 2"] but what I get is ["User 1","User 2"] . Here is the code that I’m using to produce this output in my EEx file:
Poison.encode!(Enum.map(@project_ext, fn x -> (x["name"]) end))
Can someone help?
Marked As Solved
lucaong
Ok, then in general the fact that HTML is escaped (" is turned into ") is good, because otherwise your application would be vulnerable to XSS attacks.
If the JSON you are embedding in your page does not contain any user input and is fully under your control, you can use <%= raw ... %> to skip the HTML escaping. Let me reiterate one more time the point that this can introduce an attack vector if any of this JSON data can be manipulated by untrusted parties.
See more info here: https://hexdocs.pm/phoenix_html/Phoenix.HTML.html
Also Liked
pesnk
Also beware of script injection attacks. if this value comes from an user input you need to check by yourself if the user is injecting a malicious code.
NobbZ
phoenix_html dies probably the magic here.
And to be honest, it sounds correct to do so.
If you want to submit JSON do so in an appropriate view, usually without a template.
Popular in Questions
Other popular topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Build Elixir applications with speed and confidence.
Categories:
Sub Categories:
Forums
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Develop your skills with books, videos, and courses.
Producing high quality Elixir screencasts since 2017.
The deployment platform built for Elixir: PaaS ease, VPS control.
Courses that'll move you from confusion to "Aha, now I get it!"