Thread

Hello!

For a recent project, i used {segment_1} in my code but i have a doubt…

Write this is it secure? Is it dangerous with XSS and co?

{exp:weblog:entries weblog="{segment_1}” url_title=”{segment_2}” dynamic=“off” cat disable=“pagination|trackbacks|member_data” orderby=“date” sort=“asc”}

I known it’s basic url element but do i must verify this parameters (?) or ee check by default?

Thanks for your help!

Tom

Anyone? Come on, i don’t eat you : )

Yes, it’s secure.  ExpressionEngine sanitizes content, many people use segments this way; including the default behavior of ExpressionEngine (you’re re-inventing the wheel over there =) ).

Thanks for your answer!

Love ee…again : )