typo3-documentation / typo3cms-tutorial-templating

Step-by-step Tutorial about templating in TYPO3 using Fluid & TypoScript (newer versions) or TypoScript (older versions).

Archived Tutorial for Fluid Templating

This tutorial was severely outdated and got archived starting with TYPO3 10.4. All Information that was still up to date was moved to https://docs.typo3.org/m/typo3/tutorial-sitepackage/main/en-us/FluidTemplates/Index.html

typo3cms-tutorial-templating's Issues

Tutorial out of date?

Isn't this tutorial a bit outdated? Because it still uses "columns" (column normal and column right etc.).

https://docs.typo3.org/m/typo3/tutorial-templating/master/en-us/BasicFluidTemplates/Index.html

Integrate the Tutorial Templating into Sitepackage

Update documentation to fluid based templates

I believe this (TYPO3CMS-Tutorial-Templating) is the most important documentation for TYPO3 beginners, but all the guides are pretty much outdated.
The guides are about old "markers" and "subparts" templating system.
I believe this documentation needs a rewrite.

https://docs.typo3.org/typo3cms/TemplatingTutorial/Tasks/WorkingHTML/HtmlTemplate/Index.html

Change links to point to same version in Settings.cfg

• master
• 9.5
• 8.7
• 7.6
• 6.2

Related: TYPO3-Documentation/T3DocTeam#81

Provide good and secure Fluid examples

Misleading, insecure content

https://github.com/TYPO3-Documentation/TYPO3CMS-Tutorial-Templating/blame/10.4/Documentation/BasicFluidTemplates/Index.rst#L167

• using f:format.htmlEntitiesDecode on user-submitted content, that has been encoded already (styles.content.get) is potentially insecure
• in this case it probably might be better using f:format.raw (take data as-is, given it has been encoded for HTML before - otherwise again security implications)
• see https://typo3.org/security/advisory/typo3-ext-sa-2021-007 as a reference (it's not 100% the same here, but similar)

Provide good examples on how to use Fluid

• mention all contexts and use-cases
  • regular "scalar" values
  • nested content rendering (like above, double encoded content)
  • special handling, e.g. "(only) allow line-break & transform to HTML" in values
  • special handling, e.g. "(only) allow <i>, <b>" in values
• explain scenarios
• provide good (complete) examples - show input data, show output data

Fluid Toolbox

• <f:format.raw>
• <f:format:html [parseFuncTSPath="..."]>
• <f:format.htmlSpecialChars [doubleEncode="true"]>
• <f:format.htmlEntitiesDecode>
• plain {variable}

Links on Installation point to french version

Both links pointing to the Getting Started Tut contain a parameter to chose the french version.

Getting Started Tutorial