From c59f5c24a4ff31f9f5e60a528806b7614950a682 Mon Sep 17 00:00:00 2001 From: Instrye Date: Sat, 9 May 2020 10:43:08 +0800 Subject: [PATCH] [ci skip] Fix the location of the note --- user_guide_src/source/tutorial/news_section.rst | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/user_guide_src/source/tutorial/news_section.rst b/user_guide_src/source/tutorial/news_section.rst index f54b374bd61e..3e70b4b8b165 100644 --- a/user_guide_src/source/tutorial/news_section.rst +++ b/user_guide_src/source/tutorial/news_section.rst @@ -220,6 +220,12 @@ and add the next piece of code. + +.. note:: We are again using using **esc()** to help prevent XSS attacks. + But this time we also passed "url" as a second parameter. That's because + attack patterns are different depending on the context in which the output + is used. You can read more about it :doc:`here `. + Here, each news item is looped and displayed to the user. You can see we wrote our template in PHP mixed with HTML. If you prefer to use a template language, you can use CodeIgniter's :doc:`View @@ -261,11 +267,6 @@ The only thing left to do is create the corresponding view at

-.. note:: We are again using using **esc()** to help prevent XSS attacks. - But this time we also passed "url" as a second parameter. That's because - attack patterns are different depending on the context in which the output - is used. You can read more about it :doc:`here `. - Routing -------------------------------------------------------