Drupal text filtering decision cheat sheet

Great webinar today!

You mentioned something we do pretty often, which is preprocess a block, page, node, view, etc. and recondition them to nicer variables so that our themers can work with 'cleaner' tpl files.

If I'm reassigning a variable in a preprocess for a view, do I need to filter that? The data is user-generated code from a cck field, so I'm guessing 'yes'.

Example: I have a custom theme named 'alice' and a preprocess for a view called 'front page feature' in the block format. Do I need to wrap each one in filter_xss()?


function alice_preprocess_views_view__front_page_feature__block(&$variables) {
//make nicer variables from view object to variables array
$variables['img'] = $variables['view']->field['field_frontpage_image_fid']->original_value;
$variables['type'] = $variables['view']->field['type']->original_value;
$variables['title'] = $variables['view']->field['title']->original_value;
}