I am just starting to use pathauto on a new site.
I am setting the path at admin/build/path/pathauto.

I see many patterns like [*-raw] with the warning:

[title-raw]
Unfiltered node title. WARNING - raw user input.

Not wanting to compromise the security of the site, I removed all the [*-raw] patterns and replaced them with their [*] counterpart.

However, upon submitting the form, I get plenty of error warnings:

# You are using the token [user] which has a -raw companion available [user-raw]. For Pathauto patterns you should use the -raw version of tokens unless you really know what you are doing. See the Pathauto help for more details.
# You are using the token [user] which is not valid within the scope of tokens where you are using it.
# You are using the token [title] which has a -raw companion available [title-raw]. For Pathauto patterns you should use the -raw version of tokens unless you really know what you are doing. See the Pathauto help for more details.
# You are using the token [vocab] which has a -raw companion available [vocab-raw]. For Pathauto patterns you should use the -raw version of tokens unless you really know what you are doing. See the Pathauto help for more details.
# You are using the token [catpath] which has a -raw companion available [catpath-raw]. For Pathauto patterns you should use the -raw version of tokens unless you really know what you are doing. See the Pathauto help for more details.

Precisely, I don't know what I am doing. I only want the site to be secure. The help page suggests to use the -raw patterns anyway.

The whole UI is very confusing for an administrator and the instructions are conflicting.

Comments

seanr’s picture

Version: 6.x-1.x-dev » 7.x-1.x-dev

This bug still exists in the 2.x branch. The UI directly contradicts itself. Which one is correct?

greggles’s picture

seanr’s picture

Subscribing. [edit: Ack, wrong post. Sorry.]