Yii 2 Html::a() options - protection from bad code?

Question

Yii

Hello. Please tell me, I'm trying to pass in
Html::a('Delete', ['tasksmanager/task-delete', 'task_id' => $task->id], ['onclick' => 'confirm("Delete?") ;']);
But the onlick attribute just doesn't appear on the link. If you specify 'class' instead of onclick, then the attribute is displayed. Is this protection against bydlokoda?

Answer 1

you apparently use a link inside a grid column, and in the default column settings, the type is html, which cleans links from junk using HtmlPurifier. To use the as is reference, you must set the raw type.

Answer 2

I would rather use the data-confirm attribute
Truth is not assured that in .