We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 5ec693f commit f799f61Copy full SHA for f799f61
xss.md
@@ -1,6 +1,19 @@
1
# XSS filtering
2
3
-To prevent XSS attack on some of your columns, you can use `escapeColumns` api.
+Since v7.0, all dataTable response are encoded to prevent XSS attack. In case you need to display html on your columns, you can use `rawColumns` api.
4
+
5
+> `action` column is allowed as raw by default.
6
7
+<a name="raw"></a>
8
9
+## Raw Columns
10
+```php
11
+return Datatables::eloquent(Role::select())
12
+ ->rawColumns(['name', 'action'])
13
+ ->make(true);
14
+```
15
16
+# Other XSS methods
17
18
<a name="selected"></a>
19
## Escape selected fields
0 commit comments