laravel 4 - Sanitize Input::get() (e() vs HTML::entities in laravel 4)

Question

I have read somewhere on the web that in the blade template engine, the {{ }} automatically sanitize output.

But, what if I want to echo a sanitized Input::get from the controller. What is the best way to do it (e() which is just an htmlentities or HTML::entities or something else)?

Answer 1

I have read somewhere on the web that in the blade template engine, the {{ }} automatically sanitize output.

That is incorrect. You need to use three (3) curly braces to sanitize output {{{ }}}

But, what if I want to echo a sanitized Input::get from the controller.

You should not output from your controllers - you should do it from a view

What is the best way to do it (e() which is just an htmlentities or HTML::entities or something else)?

Yes - e() is the best way to do it in Laravel 4.

On the backend, all that {{{ }}} is doing is actually changing to the equilivant of {{ e() }} anyway

Edit: in Laravel 5 both {{ }} and {{{ }}} now sanitize output. If you need to have unsantized output in Laravel 5 - you can use {!! !!}