How to stop displaying html tags in frontEnd/browser in laravel?

Question

Hey guys i am using tinymice , in my laravel admin panel that i have created, earlier this was just a textbox , so i would get content that looked like so:

I have a lovely garden in my house and i love it

Now with this richtextbox i get content stored in my table columb that looks like so:

<p>I Love Eggs and i&nbsp;Also Love to eat hame.</p>
<p>&nbsp;</p>
<p><strong>Yeah Danm ! hahah Thats funny.</strong></p>

I have the following code running in my view file:

@foreach($recentPost as $recent)

    <div class="col-md-6">
        <div class="indi-news-highlight-box">
            <a href="{!!  route('getArticle' , ['id' => $recent->id ]) !!}">
                <img src="{{ URL::asset('images/temp/blog-post-image.jpg') }}" alt="{!!  $recent->title  !!}">
            </a>
            <div class="content-box">
                <h3>
                    <a href="{!!  route('getArticle' , ['id' => $recent->id ]) !!}">
                        {{  $recent->title }}
                    </a>
                </h3>
                <p>
                    {{ $recent->blog_content }}
                </p>
            </div>      
        </div>
    </div>   <!-- End col-md-6 -->

@endForEach

The below part outputs the description which was grabbed from richtextbox:

<p>{{ $recent->blog_content }}</p>

Now i get the following in my frontEnd:

As you can see the HTML tags are output in the view itself , how do i prevent this ?? How do i prevent the HTML from outputting in my view ??.

I don't want remove the html tags LIKE HERE , I want to keep them , so i can do the styling in CSS , but i don't want the html tags displaying in my frontEnd , what is the solution to this ??

Thomas De Marez · Accepted Answer · 2017-01-10 15:09:51Z

2

Display it as unescaped data link to Laravel docs

Blade is preventing XSS for you, but using the following syntax you can tell it not to do XSS prevention.

<p>{!! $recent->blog_content !!}</p>

answered Jan 10, 2017 at 15:09

Thomas De Marez

6668 silver badges24 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Alexander Solonik Over a year ago

thanks , will accept your answer ! :) that was easy :D .

Loek Over a year ago

Note that this is pretty bad practice, since anyone who can access your rich text editor can now execute JavaScript.

Alexander Solonik Over a year ago

@Loek got it !! thanks :) , its a controlled environment , only i operate the admin panel :P , will give it a taught later , thanks for the heads up !!

fKnight · Accepted Answer · 2017-01-10 15:27:32Z

0

Change the syntax

    {{}}

to

    {!! !!}

that is to say

    {!! $recent->blog_content !!}

answered Jan 10, 2017 at 15:27

fKnight

367 bronze badges

Collectives™ on Stack Overflow

How to stop displaying html tags in frontEnd/browser in laravel?

2 Answers 2

3 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related