Template Overview

Template Engine

Aurora runs on the Smarty template engine.  It is highly recommended that you please learn about this via their website before proceeding with any of this documentation.  Aurora supports Smarty 4.  

Template Variable Escaping

Aurora will present all template variables in their raw unfiltered form by default, however when using Smarty 3 you can enable default variable escaping to help prevent Cross-site scripting (XSS) attacks. This can be enabled within the Aurora store settings here:

Store > Settings > Security > Template Engine > Escape all template variables by default?

When this is enabled the following special characters will be encoded when being rendered within a template:

You may find situations where you require the unfiltered version of a variable, such as when you are rendering the output of another template or pre-rendered content such as snippets. This can be achieved by using the nofilter parameter as follows:

{$productList nofilter}

To explicitly escape a variable see:

{$productList|escape:'html' nofilter}

For reference see Smarty escape modifier

Overview of templates

More information is available regarding these files throughout the documentation, but this list is kept for the sake of clarity in where files are stored and what they do.