Datagrids: How prevent column values from html-tag-escaping?

Hi there,

i want to add an extra column ‘description’ to a user-listing datagrid in backend.

All works fine:
1. With the help of an extra bundle I can extend/overwrite existing oro-bundle.
2. The existing datagrids.yml was expanded/appended very simple using the same datagrid-name, adding only an extra column (similiar to):
https://forum.oroinc.com/orocommerce/topic/how-to-extend-the-datagrid-yml-of-orob2bproductbundle

PHP

datagrids: some-oro-grid: source: query: select: -u.description columns: description: label: oro.some.description.label

1 2 3 4 5 6 7 8 9

datagrids:     some-oro-grid:         source:             query:               select:                 -u.description         columns:             description:                label: oro.some.description.label

In database the description value is stored as htm-text. Unfortunately, output in backend-listing is escaped. For example ‘Peter is working very hard.‘ instead of ‘Peter is working very hard’.

What can I do to prevent html-escaping?
In TWIG exists raw-filter. May be I can apply this in a way like:

PHP

datagrids: some-oro-grid: .... columns: description: label: oro.some.description.label data_name: description|raw

1 2 3 4 5 6 7

datagrids:     some-oro-grid:           ....         columns:             description:                label: oro.some.description.label                data_name: description|raw

Unfortunately this is not working. ‘data_name’ seems to be the wrong parameter-name. It is ignored at all.

Thanks for help.

ind regards
Frank

Topic

[Andrey YatsenkoModerator]

Hi Frank,
To display an HTML you can set “frontend_type” to “html” for the datagrid column.
Usually, it is used with field type “twig”.

As an example see
https://github.com/oroinc/platform/blob/9e40b84e791ed4e94a5186e6b5e7f397cc74fd3f/src/Oro/Bundle/LocaleBundle/Resources/config/oro/datagrids.yml#L56-L60

Please note, commonly, it is not secure to display a raw data as is, so you should consider to use one of HTML twig filters provided by ORO, that are secure.

• This reply was modified 4 years, 10 months ago by  Andrey Yatsenko. Reason: added security notice

[FrankParticipant]

Hi Andrey,

works like a charm!

Thank you again.

Kind regards
Frank

[Author]

Replies