docs: add esc() to views

kenjis · kenjis · commit 4d8266dfb9d7 · 2021-11-30T14:57:25.000+09:00
It is not good practice to show variables without escaping
diff --git a/user_guide_src/source/outgoing/views.rst b/user_guide_src/source/outgoing/views.rst
@@ -163,10 +163,10 @@ Now open your view file and change the text to variables that correspond to the
 
     <html>
         <head>
-            <title><?= $title ?></title>
+            <title><?= esc($title) ?></title>
         </head>
         <body>
-            <h1><?= $heading ?></h1>
+            <h1><?= esc($heading) ?></h1>
         </body>
     </html>
 
@@ -220,17 +220,17 @@ Now open your view file and create a loop::
 
     <html>
     <head>
-        <title><?= $title ?></title>
+        <title><?= esc($title) ?></title>
     </head>
     <body>
-        <h1><?= $heading ?></h1>
+        <h1><?= esc($heading) ?></h1>
 
         <h3>My Todo List</h3>
 
         <ul>
         <?php foreach ($todo_list as $item):?>
 
-            <li><?= $item ?></li>
+            <li><?= esc($item) ?></li>
 
         <?php endforeach;?>
         </ul>
