RE: Security in displaying arbitrary HTML

[Matt Sergeant]

On Fri, 28 Apr 2000, Gerald Richter wrote:

> >
> > Gerald, what about Embperl, does it escape \x8b?
> >
> 
> No, there is no html escape for \x8b (and I guess the other one Matt
> mentioned is \0x8d for >) I know, so Embperl will not escape it, but this
> could be simply change by an entry in epchar.c. Any suggestion to what this
> should be escaped? Then I will make a patch.

"&#" . ord("\0x8a") . ";"

Whatever that produces. Same for \0x8d.

-- 
<Matt/>

Fastnet Software Ltd. High Performance Web Specialists
Providing mod_perl, XML, Sybase and Oracle solutions
Email for training and consultancy availability.
http://sergeant.org http://xml.sergeant.org