Re: Template text are not being escaped when used with textile

2007-12-18 Thread Malcolm Tredinnick
On Tue, 2007-12-18 at 09:39 -0800, shabda wrote: > So should not {{text|escape|textile}} remove html tags first, and then > apply the textile-markup to generate html? The "escape" filter does not remove HTML tags, that's done by the "striptags" filter. "Escape" converts five special characters

Re: Template text are not being escaped when used with textile

2007-12-18 Thread shabda
And is there some setting which allows markdown to convert linebreaks to for all line breaks? Askin users to add two spaces when they want a line break in comment seems strange to me. On Dec 18, 10:39 pm, shabda <[EMAIL PROTECTED]> wrote: > So should not {{text|escape|textile}} remove html tags

Re: Template text are not being escaped when used with textile

2007-12-18 Thread shabda
So should not {{text|escape|textile}} remove html tags first, and then apply the textile-markup to generate html? On your weblog, b-list, you allow comments in markdown, but strip HTML, are you using something like "safe mode?" How can I enable that? BTW, that site is acting a bit strange from

Re: Template text are not being escaped when used with textile

2007-12-18 Thread James Bennett
On Dec 18, 2007 8:56 AM, shabda <[EMAIL PROTECTED]> wrote: > I am using textile markup filter. When I am using a variable in the > template without any filter they are being auto escaped, as they > should. However, if I use any markup filter like textile or markdown, > the text is not being auto

Template text are not being escaped when used with textile

2007-12-18 Thread shabda
I am using textile markup filter. When I am using a variable in the template without any filter they are being auto escaped, as they should. However, if I use any markup filter like textile or markdown, the text is not being auto escaped. Even using the escape filter manually does not help. (as