HTML does not make the order of attributes significant, so it's not a
good idea to rely on a specific order.

Sounds like you want to strip out markup, so you should already be
running a whitelist of acceptable attributes, and not let through the
the rest. For example, you wouldn't want to let through any inline
event handler attributes, or inline styles.

This approach will help solve the issue you are having, as well as
giving you a starting point for consuming HTML safely.

Here's some guidance on doing that:
http://diveintomark.org/archives/2003/06/12/how_to_consume_rss_safely




On Sat, Aug 22, 2009 at 5:17 AM, TCI<ticoconid...@gmail.com> wrote:
>
> Recently you added nofollow's, and now you moved the nofollow after
> the href. Some of us filter these out and you changing them is only
> making it more complicated. Please make up your mind and stop changing
> these...
>
> <a href="http://fun140.com/";>Fun140</a>
>
> <a rel="nofollow" href="http://fun140.com/";>Fun140</a>
>
> <a href="http://fun140.com/"; rel="nofollow">Fun140</a>

Reply via email to