> > > In spite of the fact that SerializeJSON() handles it correctly. > > > > That's a different function, designed to do a different thing. Your > > comparison is analogous to complaning that XMLFormat doesn't behave > > like CFWDDX. > > That's one of the dumbest things I've ever heard in my life.
You obviously need to get out more, then. SerializeJSON and CFWDDX allow you to take things that aren't strings at all, like queries, structures, etc, and convert them to strings. JSStringFormat, XMLFormat, URLEncodedFormat, HTMLCodeFormat, and HTMLEditFormat take existing strings and remove any metacharacters from them. They sanitize the string - make it "safe" - for the specific target environment in which the string will be used. The specific metacharacters in question depend on the target environment in question - JavaScript, XML, URLs, HTML. I don't think it's a good idea for one of these functions to "guess" that I want to remove something that isn't a metacharacter when in fact I may not. For example, I wouldn't want URLEncodedFormat to remove SQL commands embedded in a string, even though I don't generally want SQL commands in URLs. It's the programmer's job to deal with those specific cases. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:295659 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

