escape
HTML escape a text. Escapes all reserved HTML characters in the value. Escaped strings are safe to be displayed in a HTML page. When you echo a query string argument or path variable then you must escape the value before displaying it on a HTML page.
The following characters are replaced:
| Character | Replacement |
|---|---|
> | > |
< | < |
" | " |
' | ' |
& | & |
The escaping is only applied if the filter is not within an {% autoescape on %} block. If you always want escaping to
be applied, use the filter#force_escape filter.
For example:
{{ value|escape }}
When the value is <hel&lo> then the output is <hel&lo>.
Note: this filter is not part of a module, it is built into the template compiler.