Pat Lightbody wrote:

That was a typo  -- I'd only escape things that didn't have bodies to avoid
that very confusion. What say you?



That sounds fine, although I'm not too keen on the always escape thing since I won't use it myself. I have my own tranformations I want to do that are a bit more complex than the standard HTML escaping, or I don't do any. An option to turn it off per component is probably a better idea than globally if components are to live together peacefully.

With those two caveats: +1 :P

Anders Hovmöller

Pat Lightbody wrote:



There are a few open issues with regards to escaping -- none of which
all agree how it should be handled. Some want UI tags to escape, some
want them not to. Some want the URL tag to escape, others don't. I am
leaning towards this:

* UI tags, property, iterate, text, etc should all _escape_ by default
* URL tag should NOT escape by default
* All tags should have an escape attribute (true/false)
* Possibly have global params in webwork.properties to override the
two defaults (UI & URL)

What do you guys think?

-Pat



I think there is some mistake here. The property tag AND the iterate
tags can't escape. That will create the following issue:

<ww:iterate value="foo">
 this is escaped
 <ww:property value="thisPropertyIsEscapedTwice"/>
</ww:iterate>

etcetc. It seems that either you haven't thought this through or you put
it strangely. +1 on all tags having escape attribute though. I do think
that it might be an issue that there's really two kinds of escaping:
escaping the body of the tag and escaping the text the tag prints. This
is rather confusing, and unwanted.

Anders Hovmöller







-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Opensymphony-webwork mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/opensymphony-webwork

Reply via email to