Grav 2.0: Twig in Content and the New Security Sandbox

If you've moved a site to Grav 2.0 and a bit of {{ ... }} you had sitting in a page suddenly shows up as literal text instead of rendering, this post is for you. We changed how Twig runs inside page content in 2.0, and it's the single most common "wait, why did this stop working?" question we're getting. It's a deliberate change, it's a security fix, and I want to walk through what it does, why we…