Re: [Catalyst] Does uri_for() URL-escape arguments correctly ?

2012-12-09 Thread Marc SCHAEFER
On Tue, Dec 04, 2012 at 03:37:31PM -0800, Bill Moseley wrote: I've always used href=[% c.uri_for( ... ) | html %] I can see a few issues when using ?a=bc=d type of URL parameters[1], but this is not usually what you do with Catalyst, so let's set this aside for the moment. Your suggestion is

[Catalyst] Does uri_for() URL-escape arguments correctly ?

2012-12-04 Thread Marc SCHAEFER
Hi, for some time I write things like this in my templates: a href=[% c.uri_for(c.controller.action_for('object'), [ file ]) %]img src=[% c.uri_for(c.controller.action_for('thumbnail'), [ file ]) %] alt=[% video | html %] //a where file is something which can contain a lot of dangerous

Re: [Catalyst] Does uri_for() URL-escape arguments correctly ?

2012-12-04 Thread Bill Moseley
On Tue, Dec 4, 2012 at 5:22 AM, Marc SCHAEFER schae...@alphanet.ch wrote: Hi, for some time I write things like this in my templates: a href=[% c.uri_for(c.controller.action_for('object'), [ file ]) %]img src=[% c.uri_for(c.controller.action_for('thumbnail'), [ file ]) %] alt=[% video |