> In InputFilter, around line 445, instead of building the new text
> node's
> value manually, just say 'value' => (string)$node ... that serializes
> the node back to text again, including attributes. But since the node
> type will be changed to text, it will be escaped on output.
Almost there after r3391, but I may have broken some things. Please
take a look, Matt (Bauer).
Commit message for 3391:
Partially fixes the URL problem, but still not quite working right:
Before:
echo 'echo InputFilter::filter("foo <http://localhost> bar");' | heval
foo <http:>/localhost> bar
(the > is incorrectly injected)
After:
$ echo 'echo InputFilter::filter("foo <http://localhost foo> bar");' |
heval
foo <http://localhost foo=""> bar
the ="" is incorrectly injected
Feel free to revert this if it breaks anything, or if you have a
better approach.
(http://trac.habariproject.org/habari/changeset/3391)
S
--~--~---------~--~----~------------~-------~--~----~
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at http://groups.google.com/group/habari-dev
-~----------~----~----~----~------~----~------~--~---