Vladimir Pastukhov sent the following bits through the ether:

> Andy, I think it's not a good idea to encode high character codes
> by default since there are languages that do not use latin-1 entities.
> There should be a new separate filter or a global configuration option
> or something, otherwise many people would have to change existing
> templates to achieve original behavior.

However, this does need to be done for Latin-1 entities to prevent
cross site scripting exploits (something HTML::Entities does but
Apache::Utils does not, according to a recent thread on the mod_perl
list). Hmmm.

Leon
-- 
Leon Brocard.............................http://www.astray.com/
Nanoware...............................http://www.nanoware.org/

... We're sorry, but reality is not in service at this time


Reply via email to