How to escape string data passed from laravel to vuejs












0















I'm setting up a new website and I'd like to send data from the Laravel blade template to the Vue.js front end.



I've tried passing the php property into an html proprerty I can access from vue and this works with simple strings.



<div id="paragraphs" originaldata="{!! $band->paragraphs !!}">
...
mounted: function() {
this.paragraphs = this.$el.attributes.originaldata.value.split('//')
this.paragraphs.push('')
}


This does not with strings containing double quotes or html tags. I have tried binding to a prop using single quoted json_encoded data however this output breaks the prop-parsing in the browser and leaves bits of html and data scattered in the DOM.










share|improve this question























  • Which Laravel version are you using?

    – Mozammil
    Jan 1 at 8:29
















0















I'm setting up a new website and I'd like to send data from the Laravel blade template to the Vue.js front end.



I've tried passing the php property into an html proprerty I can access from vue and this works with simple strings.



<div id="paragraphs" originaldata="{!! $band->paragraphs !!}">
...
mounted: function() {
this.paragraphs = this.$el.attributes.originaldata.value.split('//')
this.paragraphs.push('')
}


This does not with strings containing double quotes or html tags. I have tried binding to a prop using single quoted json_encoded data however this output breaks the prop-parsing in the browser and leaves bits of html and data scattered in the DOM.










share|improve this question























  • Which Laravel version are you using?

    – Mozammil
    Jan 1 at 8:29














0












0








0








I'm setting up a new website and I'd like to send data from the Laravel blade template to the Vue.js front end.



I've tried passing the php property into an html proprerty I can access from vue and this works with simple strings.



<div id="paragraphs" originaldata="{!! $band->paragraphs !!}">
...
mounted: function() {
this.paragraphs = this.$el.attributes.originaldata.value.split('//')
this.paragraphs.push('')
}


This does not with strings containing double quotes or html tags. I have tried binding to a prop using single quoted json_encoded data however this output breaks the prop-parsing in the browser and leaves bits of html and data scattered in the DOM.










share|improve this question














I'm setting up a new website and I'd like to send data from the Laravel blade template to the Vue.js front end.



I've tried passing the php property into an html proprerty I can access from vue and this works with simple strings.



<div id="paragraphs" originaldata="{!! $band->paragraphs !!}">
...
mounted: function() {
this.paragraphs = this.$el.attributes.originaldata.value.split('//')
this.paragraphs.push('')
}


This does not with strings containing double quotes or html tags. I have tried binding to a prop using single quoted json_encoded data however this output breaks the prop-parsing in the browser and leaves bits of html and data scattered in the DOM.







javascript laravel vue.js






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Jan 1 at 8:26









Fred StidstonFred Stidston

225




225













  • Which Laravel version are you using?

    – Mozammil
    Jan 1 at 8:29



















  • Which Laravel version are you using?

    – Mozammil
    Jan 1 at 8:29

















Which Laravel version are you using?

– Mozammil
Jan 1 at 8:29





Which Laravel version are you using?

– Mozammil
Jan 1 at 8:29












1 Answer
1






active

oldest

votes


















1














You can hang encoded data from DOM elements and decode the content within a Vue component lifecycle hook.



// consider some arbitrary data passed from a Laravel controller containing HTML tags.
$data = '<form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>';

// echo the data within a blade layout or page element. CSRF tokens are often passed over this way.
<meta content="{{ base64_encode($data) }}" name="encoded">

// when your Vue component loads you can then access the DOM
export default {
mounted () {
const data = document.querySelector('meta[name="encoded"]').content

alert(atob(data))
}
}


Here's a basic demo with vanilla PHP / JavaScript






share|improve this answer

























    Your Answer






    StackExchange.ifUsing("editor", function () {
    StackExchange.using("externalEditor", function () {
    StackExchange.using("snippets", function () {
    StackExchange.snippets.init();
    });
    });
    }, "code-snippets");

    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "1"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53994047%2fhow-to-escape-string-data-passed-from-laravel-to-vuejs%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    1














    You can hang encoded data from DOM elements and decode the content within a Vue component lifecycle hook.



    // consider some arbitrary data passed from a Laravel controller containing HTML tags.
    $data = '<form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>';

    // echo the data within a blade layout or page element. CSRF tokens are often passed over this way.
    <meta content="{{ base64_encode($data) }}" name="encoded">

    // when your Vue component loads you can then access the DOM
    export default {
    mounted () {
    const data = document.querySelector('meta[name="encoded"]').content

    alert(atob(data))
    }
    }


    Here's a basic demo with vanilla PHP / JavaScript






    share|improve this answer






























      1














      You can hang encoded data from DOM elements and decode the content within a Vue component lifecycle hook.



      // consider some arbitrary data passed from a Laravel controller containing HTML tags.
      $data = '<form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>';

      // echo the data within a blade layout or page element. CSRF tokens are often passed over this way.
      <meta content="{{ base64_encode($data) }}" name="encoded">

      // when your Vue component loads you can then access the DOM
      export default {
      mounted () {
      const data = document.querySelector('meta[name="encoded"]').content

      alert(atob(data))
      }
      }


      Here's a basic demo with vanilla PHP / JavaScript






      share|improve this answer




























        1












        1








        1







        You can hang encoded data from DOM elements and decode the content within a Vue component lifecycle hook.



        // consider some arbitrary data passed from a Laravel controller containing HTML tags.
        $data = '<form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>';

        // echo the data within a blade layout or page element. CSRF tokens are often passed over this way.
        <meta content="{{ base64_encode($data) }}" name="encoded">

        // when your Vue component loads you can then access the DOM
        export default {
        mounted () {
        const data = document.querySelector('meta[name="encoded"]').content

        alert(atob(data))
        }
        }


        Here's a basic demo with vanilla PHP / JavaScript






        share|improve this answer















        You can hang encoded data from DOM elements and decode the content within a Vue component lifecycle hook.



        // consider some arbitrary data passed from a Laravel controller containing HTML tags.
        $data = '<form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>';

        // echo the data within a blade layout or page element. CSRF tokens are often passed over this way.
        <meta content="{{ base64_encode($data) }}" name="encoded">

        // when your Vue component loads you can then access the DOM
        export default {
        mounted () {
        const data = document.querySelector('meta[name="encoded"]').content

        alert(atob(data))
        }
        }


        Here's a basic demo with vanilla PHP / JavaScript







        share|improve this answer














        share|improve this answer



        share|improve this answer








        edited Jan 1 at 10:02

























        answered Jan 1 at 9:37









        DigitalDrifterDigitalDrifter

        8,6552625




        8,6552625
































            draft saved

            draft discarded




















































            Thanks for contributing an answer to Stack Overflow!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53994047%2fhow-to-escape-string-data-passed-from-laravel-to-vuejs%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            MongoDB - Not Authorized To Execute Command

            How to fix TextFormField cause rebuild widget in Flutter

            Npm cannot find a required file even through it is in the searched directory