diff --git a/typo3/sysext/fluid/Classes/ViewHelpers/Format/HtmlViewHelper.php b/typo3/sysext/fluid/Classes/ViewHelpers/Format/HtmlViewHelper.php index 6d2792457b344ab1ccc5d39ad38878731c8840c5..d768748730485906727104c752af740fabae4079 100644 --- a/typo3/sysext/fluid/Classes/ViewHelpers/Format/HtmlViewHelper.php +++ b/typo3/sysext/fluid/Classes/ViewHelpers/Format/HtmlViewHelper.php @@ -34,6 +34,10 @@ use TYPO3Fluid\Fluid\Core\ViewHelper\Traits\CompileWithRenderStatic; * You can either specify a path to the TypoScript setting or set the `parseFunc`_ options directly. * By default :typoscript:`lib.parseFunc_RTE` is used to parse the string. * + * The view helper must not be used in backend context, as it triggers frontend logic. + * Instead, use :html:`<f:sanitize.html />` to secure a given HTML string or :html:`<f:transform.html />` + * to parse links in HTML. + * * Examples * ======== *