Is it because of xss prevention that Thinkphp escapes certain symbols every time it submits content with the editor, thus preventing pictures that cannot be edited in the editor from displaying normally?

  question

Is it because of xss prevention that Thinkphp escapes certain symbols every time it submits content with the editor, thus preventing pictures that cannot be edited in the editor from displaying normally? This problem has always been encountered before. At first I thought it was an editor problem, but later I changed the editor and still had problems.

I’d better answer it myself. . Yes .

One of the easiest strategies to prevent XSS is to filter the corresponding fields or codes. But there are too many unusual fields for Rich Text Editor.

Therefore, in order to display normally, some double quotes or the like must be escaped or filtered out every time.