Hello,
First sentence of sanitize() method doc says: “This sanitize helper
will html encode all tags and strip all attributes that aren’t
specifically allowed.”
But sanitize(“
foo
should html encode”) ==“
foo
should html encode”.Shouldn’t it html encode to <bar> ?
–
Jacek