Back to Twig

``template_from_string``

doc/functions/template_from_string.rst

3.26.01.9 KB
Original Source

template_from_string

The template_from_string function loads a template from a string:

.. code-block:: twig

{{ include(template_from_string("Hello {{ name }}")) }}
{{ include(template_from_string(page.template)) }}

To ease debugging, you can also give the template a name that will be part of any related error message:

.. code-block:: twig

{{ include(template_from_string(page.template, "template for page " ~ page.name)) }}

.. note::

The ``template_from_string`` function is not available by default.

On Symfony projects, you need to load it in your ``services.yaml`` file:

.. code-block:: yaml

    services:
        Twig\Extension\StringLoaderExtension:

or ``services.php`` file::

    $services->set(\Twig\Extension\StringLoaderExtension::class);

Otherwise, add the extension explicitly on the Twig environment::

    use Twig\Extension\StringLoaderExtension;

    $twig = new \Twig\Environment(...);
    $twig->addExtension(new StringLoaderExtension());

.. note::

Even if you will probably always use the ``template_from_string`` function
with the ``include`` function, you can use it with any tag or function that
takes a template as an argument (like the ``embed`` or ``extends`` tags).

.. danger::

Never allow ``template_from_string`` in a sandboxed template. There is no
legitimate use case for letting untrusted template code build and render
arbitrary new templates on the fly, and doing so makes any sandbox policy
impossible to reason about. In particular, when sandboxing is driven by a
``SourcePolicyInterface``, the template created by ``template_from_string``
gets a synthesized name that is not possible to match, so the inner
template ends up running with no sandbox at all.

Arguments

  • template: The template
  • name: A name for the template