HTMLã¨ã¹ã±ã¼ãã®å¯¾è±¡ã¨ãªã < > & " ã®4æåã¯ãæåå®ä½åç §ã«å¤æãããå¾ãpreg_replaceé¢æ°ã§ã»ãã³ãã³ãåé¤ãã¦ãã¾ãã®ã§ãä¸éå端ãªå¦ãªæååãã«ãªãããã§ãã ä¸è¬çãªååã¨ãã¦ã¯ããã¼ã¿ãã¼ã¹ã«ã¯HTMLã®å½¢ã§ã¯ãªããã¬ã¼ã³ããã¹ãã®å½¢ã§ä¿åãã¦ãããHTMLã¨ãã¦è¡¨ç¤ºããç´åã«HTMLã¨ã¹ã±ã¼ãããæ¹æ³ã§çµ±ä¸ãããã¨ã§ãä¸è¨ã®ãããªæååããã¨ã¹ã±ã¼ãæ¼ãããªãããã¨ãããã§ãããã èå¼±æ§ã¯ãªãã®ã ãã®sanitizeé¢æ°ã«èå¼±æ§ã¯ãªãã§ãããããä¸è¡¨ã®ããã«ãããã¯ã¹ã©ãã·ã¥ï¼åè¨å·ï¼ãç´ éããã¦ããã®ã§ãMySQLããè¨å®ã«ãã£ã¦ã¯PostgreSQLã®å ´åã«ãåé¡ãçãããã§ãã以ä¸ãããã説æãã¾ãã以ä¸ã®èª¬æã§ã¯ãMySQLã使ãæ³å®ã¨ãã¾ãã 以ä¸ã®ããã«ããã°ã¤ã³å¦çãæ³å®ããSQLæçµç«ããã£ãã¨ãã¾ãã $sql = sprintf(
{{#tags}}- {{label}}
{{/tags}}