diff --git a/user_guide_src/source/tutorial/news_section.rst b/user_guide_src/source/tutorial/news_section.rst index 935f79476054..40e8d3ad6da8 100644 --- a/user_guide_src/source/tutorial/news_section.rst +++ b/user_guide_src/source/tutorial/news_section.rst @@ -176,7 +176,7 @@ Create **app/Views/news/index.php** and add the next piece of code. .. literalinclude:: news_section/005.php -.. note:: We are again using using :php:func:`esc()` to help prevent XSS attacks. +.. note:: We are again using :php:func:`esc()` to help prevent XSS attacks. But this time we also passed "url" as a second parameter. That's because attack patterns are different depending on the context in which the output is used.