On Mon, 5 Apr 2004 14:57:44 +0200
"Henner Kollmann" <[EMAIL PROTECTED]> wrote:

HK> > Let's think from the start.
HK> > In current code if you write &ccedil; it will be written to 
HK> > database field as &ccedil; but when you go to edit this field 
HK> > the entry field will show 'ç' wich is visually the same, but 
HK> > not correctly because the real value in database is '&ccedil;'.
HK> > 
HK> > The escape make correctly the edit part of the system, but 
HK> > must be optional to the developer in the labels, where the 
HK> > developer can select to escape or not depending of the data.
HK> 
HK> +1
HK> 
HK> > 
HK> > We can create an attribute in DbBaseHandlertag to control 
HK> > this selection, the default must be to escape this make 
HK> > transparent for applications the conversions, and only when 
HK> > the developer really know that the value in field is HTML he 
HK> > can show the data without escaping.
HK> We should add this attribute to textFields too. And default should
HK> be not to escape - this would be backward compatible. But we should
HK> always escape the " in textField because of the resulting parsing
HK> errors.
HK> 

Then I think the default must be a global config value.

Sometimes it's necessary to break some compatibility, the current
behaviour is wrong, as it show for editing a different value from
database field. 
To make the changes small, we can put default as Escape, and create a
single config option to change default to do not escape. 

The new projects will be correct, and old projects can run correctly
with only a single change in config. Which can be documented in the
release docs.

When showing data we check the new escapeHTML attribute :
true
  escape all 
false
  escape only quotes


After we decide the best option to be implemented, if you point me the
best places to make this changes, I can change my patch and submit
again.

-- 


Ivan F. Martinez


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click
_______________________________________________
DbForms Mailing List

http://www.wap-force.net/dbforms

Reply via email to