On 15 Jan 2008, at 00:17, Tom Hughes wrote:
> In message <[EMAIL PROTECTED]>
> Frederik Ramm <[EMAIL PROTECTED]> wrote:
>
>> Fixing the particular problem is probably a one-liner for our ruby
>> heroes but as you said in your initial E-Mail, the problem may be
>> widespread and should be investigated thoroughly. Maybe I can even
>> create an username that contains HTML and this gets then displayed in
>> other people's "users near you" lists and so on. Maybe I can enter
>> place names into OSM that have HTML in them, and they get displayed
>> with the name finder results?
>
> It's anything but trivial to fix (without loosing functionality) which
> is why it hasn't been done before.
>
> If whoever originally wrote the code had thought about these things
> then it would have been easy, but dealing with the legacy data that we
> now have makes it hard.
when you print the content cant you just escape html brackets?
<%= blah.content.gsub('<', '<') %>
in fact isnt there a rails function to do it?
>
>
> Tom
>
> --
> Tom Hughes ([EMAIL PROTECTED])
> http://www.compton.nu/
>
> _______________________________________________
> dev mailing list
> [email protected]
> http://lists.openstreetmap.org/cgi-bin/mailman/listinfo/dev
>
have fun,
SteveC | [EMAIL PROTECTED] | http://www.asklater.com/steve/
_______________________________________________
dev mailing list
[email protected]
http://lists.openstreetmap.org/cgi-bin/mailman/listinfo/dev
