Query string variables

Declare which query parameters a page accepts in front matter. Declared parameters are URL-decoded, HTML-escaped, and made available as TT variables via the query hash. Undeclared parameters are silently ignored.

Syntax

---
title: Search
query_params:
  - q
  - page
---
[% IF query.q %]
Searching for: [% query.q %]
[% END %]

Declaring parameters

Use a YAML list under query_params: in front matter:

---
query_params:
  - name
  - color
---

Accessing in TT

Parameters appear in the query hash:

[% query.name %]
[% query.color %]

Example

---
title: Greeting
query_params:
  - name
---
[% IF query.name %]
Hello, [% query.name %]!
[% ELSE %]
Hello, visitor!
[% END %]

Request /greeting?name=Alice renders "Hello, Alice!".

Security

• Values are HTML-escaped before storage: &, <, >, ", ' are all converted to HTML entities
• Only declared parameters are passed through - undeclared parameters in the URL are dropped entirely
• URL-decoding is applied (%XX hex sequences and + for spaces)

Caching behaviour

Pages with active query parameters (a declared parameter is present in the request URL) are rendered dynamically on each request and the result is not cached. Requests without query parameters still serve from cache normally.

Notes

• The cache bypass only triggers when a declared parameter appears in the actual request - merely declaring query_params does not disable caching for requests without parameters
• Works with all modes: normal, raw, and api
• API mode - combine with api: true for JSON endpoints that accept parameters