Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

JoeCianflone's avatar

Bug in 4.3 everything is escaped

Has anyone seen this issue (saw it last night and this morning). I'm trying to figure out if it's just me or if this is a real bug before I submit something. I've got a fresh install of 4.3 and I pulled in the illuminate\html package. When I try to open a form, or use the scripts, or styles helpers:

{{ Form::open() }}

The HTML is all escaped so I get a pretty HTML tag displayed on my screen. I'm using Homestead and I have a bunch of 4.2 projects on the same VM and I'm not having any issues, so I know this isn't an issue with by server setup. But, it's a new version of Laravel so maybe I'm doing something wrong.

0 likes
6 replies
etelford's avatar
Level 5

To render raw code with Blade you now have to use: {!! and !!}. {{ and {{{ will be escaped by default.

See here: https://github.com/laravel/framework/blob/833d90073da404df4b5b94c182f931b5c239fa10/src/Illuminate/View/Compilers/BladeCompiler.php#L33-L38

and here where Taylor explains the change and how to revert back if you feel the need:

https://laracasts.com/discuss/channels/general-discussion/new-blade-tag-for-unescaped-data-thoughts/replies/3923

JoeCianflone's avatar

Thanks @etelford!

This is a pretty big breaking change. I hope Taylor does indeed bump this version to 5.0

psyao's avatar

It’s not a bug, it’s a feature.

JeffreyWay's avatar

It keeps you safe, by making {{ }} default to escaping.

JoeCianflone's avatar

Glad about the bump to 5.0. I think it makes sense. Not sure I agree with the necessity of {{ }} defaulting to escaped since {{{ }}} already existed, but whatever, it's not a huge deal for me or my codebase. Thanks all for your responses!

Please or to participate in this conversation.