diff --git a/typo3/sysext/fluid/Classes/ViewHelpers/Format/HtmlViewHelper.php b/typo3/sysext/fluid/Classes/ViewHelpers/Format/HtmlViewHelper.php index 8336df20d04480aa58cad146ff543fdbb4c6bb82..91d8b839e7445d11ace261a8eee96a886485cfbb 100644 --- a/typo3/sysext/fluid/Classes/ViewHelpers/Format/HtmlViewHelper.php +++ b/typo3/sysext/fluid/Classes/ViewHelpers/Format/HtmlViewHelper.php @@ -28,6 +28,10 @@ use TYPO3Fluid\Fluid\Core\ViewHelper\Traits\CompileWithRenderStatic; * You can either specify a path to the TypoScript setting or set the `parseFunc`_ options directly. * By default :typoscript:`lib.parseFunc_RTE` is used to parse the string. * + * The view helper must not be used in backend context, as it triggers frontend logic. + * Instead, use :html:`<f:sanitize.html />` to secure a given HTML string or :html:`<f:transform.html />` + * to parse links in HTML. + * * Examples * ======== *