What are some potential pitfalls to avoid when using Twig for PHP templating?

One potential pitfall to avoid when using Twig for PHP templating is forgetting to properly escape user input to prevent cross-site scripting attacks. Always use the `raw` filter to output raw HTML content safely. 

// Incorrect way without escaping user input
echo $twig->render('template.html', ['content' => $userInput]);

// Correct way with escaping user input
echo $twig->render('template.html', ['content' => $twig->raw($userInput)]);

Keywords

Twig PHP templating security vulnerabilities XSS attacks escaping mechanisms

Related Questions