I am just starting to use pathauto on a new site.
I am setting the path at admin/build/path/pathauto.
I see many patterns like [*-raw] with the warning:
[title-raw]
Unfiltered node title. WARNING - raw user input.
Not wanting to compromise the security of the site, I removed all the [*-raw] patterns and replaced them with their [*] counterpart.
However, upon submitting the form, I get plenty of error warnings:
# You are using the token [user] which has a -raw companion available [user-raw]. For Pathauto patterns you should use the -raw version of tokens unless you really know what you are doing. See the Pathauto help for more details.
# You are using the token [user] which is not valid within the scope of tokens where you are using it.
# You are using the token [title] which has a -raw companion available [title-raw]. For Pathauto patterns you should use the -raw version of tokens unless you really know what you are doing. See the Pathauto help for more details.
# You are using the token [vocab] which has a -raw companion available [vocab-raw]. For Pathauto patterns you should use the -raw version of tokens unless you really know what you are doing. See the Pathauto help for more details.
# You are using the token [catpath] which has a -raw companion available [catpath-raw]. For Pathauto patterns you should use the -raw version of tokens unless you really know what you are doing. See the Pathauto help for more details.
Precisely, I don't know what I am doing. I only want the site to be secure. The help page suggests to use the -raw patterns anyway.
The whole UI is very confusing for an administrator and the instructions are conflicting.
Comments
Comment #1
seanrThis bug still exists in the 2.x branch. The UI directly contradicts itself. Which one is correct?
Comment #2
greggles#285136: Provide better guidance to users about using -raw tokens
Comment #3
seanrSubscribing. [edit: Ack, wrong post. Sorry.]