No Compromises

Understanding how Stringable works inside Blade views


Listen Later

Joel and Aaron dig into Laravel’s `Stringable` class and uncover how it can silently skip Blade’s automatic HTML escaping. They explain why that’s both a convenient feature and a potential security pitfall if user input isn’t properly sanitized. You’ll hear practical ways to keep your views safe without losing the API’s fluency.

  • (00:00) - Stringable can sidestep Blade escaping
  • (03:45) - Dangers of outputting unsanitized HTML
  • (05:45) - Defensive strategies for safe rendering
  • (08:45) - Silly bit

  • Sign up for a short, but useful, Laravel tip each day in our newsletter
    ...more
    View all episodesView all episodes
    Download on the App Store

    No CompromisesBy Joel Clermont and Aaron Saray

    • 4.9
    • 4.9
    • 4.9
    • 4.9
    • 4.9

    4.9

    8 ratings


    More shows like No Compromises

    View all
    Startups For the Rest of Us by Rob Walling

    Startups For the Rest of Us

    696 Listeners

    The Laravel Podcast by Taylor Otwell, Matt Stauffer

    The Laravel Podcast

    57 Listeners

    Software Engineering Daily by Software Engineering Daily

    Software Engineering Daily

    621 Listeners

    Laravel News Podcast by Jacob Bennett and Michael Dyrynda

    Laravel News Podcast

    55 Listeners

    North Meets South Web Podcast by Jacob Bennett and Michael Dyrynda

    North Meets South Web Podcast

    24 Listeners

    Syntax - Tasty Web Development Treats by Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers

    Syntax - Tasty Web Development Treats

    987 Listeners

    REWORK by 37signals

    REWORK

    211 Listeners

    Darknet Diaries by Jack Rhysider

    Darknet Diaries

    7,879 Listeners

    My First Million by Hubspot Media

    My First Million

    2,624 Listeners

    Notes On Work - by Caleb Porzio by Caleb Porzio

    Notes On Work - by Caleb Porzio

    17 Listeners

    All-In with Chamath, Jason, Sacks & Friedberg by All-In Podcast, LLC

    All-In with Chamath, Jason, Sacks & Friedberg

    9,189 Listeners

    php[podcast] episodes from php[architect] by php[podcast] episodes from php[architect]

    php[podcast] episodes from php[architect]

    4 Listeners

    Mostly Technical by Ian Landsman and Aaron Francis

    Mostly Technical

    27 Listeners

    Talking Businessly by Daniel Coulbourne & John Drexler

    Talking Businessly

    2 Listeners

    The Panel by Justin Jackson & Brian Casel

    The Panel

    3 Listeners