Re: [Zope] Two issues for Z2.2: XHTML & malicious tags

2000-06-02 Thread Alexander Limi
Evan Simpson: > I've got a rather crude module going which parses an input string for > HTML-ish tags. It allows only tags from an explicit list, and > ensures that > non-empty tags are closed (either by complaining or adding closing tags). > If 'script' is not one of the allowed tags, it also d

Re: [Zope] Two issues for Z2.2: XHTML & malicious tags

2000-06-02 Thread Evan Simpson
- Original Message - From: Alexander Limi <[EMAIL PROTECTED]> > 2. Malicious HTML tags - is anything being done here? Filtering of these is > one of the features Zope 2.2 really shouldn't go without. Most Zope sites > have user interaction in some way, and the concept of a post containing

Re: [Zope] Two issues for Z2.2: XHTML & malicious tags

2000-06-02 Thread J M Cerqueira Esteves
On Fri, Jun 02, 2000 at 06:50:46PM +0200, Alexander Limi wrote: > 1. The HTML that Zope outputs is not very standards-compliant (XHTML 1.0) at > the moment. Tags like are rendered as etc. I would like to Perhaps support for XHTML-compliance in Zope should be optional. I wrote a few pages in XH

[Zope] Two issues for Z2.2: XHTML & malicious tags

2000-06-02 Thread Alexander Limi
Zopistas, I have two issues that I think should be rectified before the 2.2 release. I am not very up to date on the goings-on in the list, but a quick search gave me little information on the following: 1. The HTML that Zope outputs is not very standards-compliant (XHTML 1.0) at the moment. Tag