Paul Lomax wrote:
> Hi Lukas,
>
>> However I envision it quickly becomes a hassle when you mix html and
>> javascript outputting.
>
> How?
>
> echo $sf_data->get('variable', ESC_METHOD);
Thats a lot of characters for outputting a single variable. Thats what I
mean with hassle.
> The idea behind the escaping strategy is that you should escape by
> default. This avoids human error as much as possible. In the majority
> of cases people actually want their variables escaped (although they
> may not realise it)
Yes and no .. it also means that the developer will get a habit of not
thinking about it ..
regards,
Lukas
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en
-~----------~----~----~----~------~----~------~--~---
