On Wed, 5 Mar 2003, MaxG wrote:
> I faced the problem, when I needed to use arguments written in cyrillic
> in HTML::Template::Expr functions.
> I looked in the grammar and noticed only [A-Za-z0-9_] characters are
> allowed. Why is that?
>
> I modified the rule for var in grammar to look like this:
>
> var : /[^() ,][^() ,]*/ { \\\$item[1] }
well, in general, checking for the absence bad characters is a bad idea
- if you miss out a few, your expression will allow bad characters.
It's better to check for allowed characters and expand that set as and
when required.
IIRC, there's something to this effect mentioned in perlsec.
--
Shannon's Observation:
Nothing is so frustrating as a bad situation that is beginning to
improve.
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Html-template-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/html-template-users
