Mini, Gabor used "test" as an example, use your field name (description).

As Mini pointed out you need to filter the content to remove
JavaScript, XSS attacks, bad CSS that trashes the layout of the page,
etc. (unless the only person entering it is trusted, and maybe even
then to cut down on tedious support calls).

For that purpose, check out pkToolkitPlugin and the pkHtml::simplify()
method, which is designed expressly for the purpose of reducing
user-entered HTML to something sane and safe.

-- 
Tom Boutell
P'unk Avenue
215 755 1330
punkave.com
window.punkave.com

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"symfony users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to