11.3.3 About Using Escaping Syntax in Substitution Strings
Use escaping syntax in substitution strings.
Developers can append an exclamation mark (!
) followed by a predefined filter name to substitution strings to escape special characters in the substitution value. Output escaping is an important security technique to avoid Cross Site Scripting (XSS) attacks in the browser.
Parent topic: Creating Custom Themes