Security BLOG

AnQiCMS Help Document and User Guide

How to use the `escapejs` filter to safely embed template variables into JavaScript code?

In the daily use of AnQi CMS, we often need to display the content of the background management, such as article titles, user comments, or other dynamic data, on the front-end page.This content is not just plain text, it also needs to be used in JavaScript code, such as variable values, function parameters, or dynamically generated HTML fragments.However, embedding template variables directly into JavaScript code, if not handled properly, may introduce a significant security vulnerability - cross-site scripting (XSS)

📅 November 8, 2025 👁️ 80

What risks should be noted when using the `safe` filter to prevent XSS attacks in AnQiCMS templates?

AanQi CMS has always paid great attention to security from the very beginning, which is fully reflected in its concise and efficient Go language architecture, aiming to provide users with a secure and stable content management environment.In the daily content publishing and template creation, we often come across various template tags and filters.Among them, the `safe` filter is a powerful tool but also one that requires our special vigilance.It allows us to output raw HTML content in the template, but it is precisely this 'freedom' that hides some risks that should not be overlooked, especially in preventing cross-site scripting (XSS) attacks.

📅 November 8, 2025 👁️ 64

How to repeat a string a specified number of times, for example, to display a welcome message repeatedly?

In website content operations, we often encounter situations where we need to repeat certain information, such as repeating copyright information in the footer, playing a greeting phrase in the welcome area repeatedly, or adding visual separators between list items.Copying and pasting manually is not only inefficient but also very麻烦 when it needs to be modified.Luckyly, AnQiCMS's powerful template engine provides a simple and efficient way to solve this problem, one very practical feature is the `repeat` filter.###

📅 November 8, 2025 👁️ 65

The `stringformat` filter provides which advanced string formatting options (such as number precision, alignment style)?

In the powerful template system of AnQi CMS, we often need to present dynamic data on the website, and the way data is displayed directly affects user experience and the efficiency of information communication.To present numbers, text, and other content in a more professional and clear manner, AnQi CMS provides the `stringformat` filter, which is a multifunctional formatting tool that helps us finely control the display details of content.The `stringformat` filter plays a role in AnQi CMS similar to the `fmt` in Go language

📅 November 8, 2025 👁️ 73

How to use the `slice` filter to extract a specified range of characters or elements from a string or array?

In the process of creating AnQiCMS templates, it is essential to be able to flexibly handle strings and arrays.Whether it is to display the article summary or to extract part of the elements from the list, the `slice` filter can provide powerful and convenient help.It allows you to extract specific ranges of characters from strings or select elements from arrays at specified positions, making content display more accurate and diverse.What is the `slice` filter?In simple terms, the `slice` filter is like a precise pair of scissors

📅 November 8, 2025 👁️ 65

What are the differences between `trim`, `trimLeft`, and `trimRight` filters in removing whitespace or specific characters from a string?

In website content management, we often encounter situations where we need to clean and format strings, such as removing extra spaces at the beginning and end of user input text, or standardizing data with specific prefixes or suffixes.AnQiCMS provides a series of powerful template filters to simplify these operations, among which `trim`, `trimLeft`, and `trimRight` are powerful tools for handling string leading and trailing characters.They have similar functions but have different scopes.

📅 November 8, 2025 👁️ 91

How to limit the display length of the link text when converting URLs with the `urlizetrunc` filter?

In AnQiCMS (AnQiCMS) content operation practice, we often encounter some details that require fine-grained processing, one of which is how to elegantly display the super-long URL on the page.When a text contains a long URL, it may destroy the page layout and affect the overall aesthetics and the reading experience of the user.Fortunately, Anqi CMS provides the `urlizetrunc` filter, which can help us easily solve this problem, allowing URLs to be converted into clickable links while still controlling their display length

📅 November 8, 2025 👁️ 69

How does AnQiCMS automatically identify URL links in text and convert them into clickable `<a>` tags?

During content creation and publication, we often encounter situations where we need to cite external sources or share relevant links.If these URLs are in plain text form, users not only need to manually copy and paste them, but it will also affect the reading experience and the professionalism of the website.Anqi CMS knows this pain point, and therefore integrated the intelligent URL automatic recognition and conversion function from the beginning of the system design, making your content publishing more efficient and convenient, and improving the user experience accordingly.### Intelligent recognition, automatic conversion: Say goodbye to manual operation AnQi CMS through its powerful template engine

📅 November 8, 2025 👁️ 73

What is the difference between the `urlencode` and `iriencode` filters in URL escaping?

In the daily content operation and website development of Anqi CMS, we often need to handle URL links to ensure that they are both secure and effective, and can be correctly parsed by browsers and search engines.This is an indispensable part of URL escaping (also known as encoding).Our Anqi CMS provides us with two very practical filters: `urlencode` and `iriencode`, both of which can help us with URL escaping, but their purposes and processing methods are different in actual application.###

📅 November 8, 2025 👁️ 70

How to encode URL parameters to ensure the correctness and security of the link?

In the daily operation of Anqi CMS, we often need to deal with various website links, which not only need to be beautiful and SEO-friendly, but more importantly, they must work correctly and safely.Among these, encoding URL parameters is a seemingly trivial but crucial link, which is directly related to the integrity and user experience of our website links.Why is URL parameter encoding so important?Imagine if your website had a search function, and users entered keywords containing spaces, special characters, or even Chinese characters, such as "Anqi CMS"}

📅 November 8, 2025 👁️ 119