Josh Rosenbaum wrote:


Looking at the code, I think the url plugin url-encodes params. (Including non-safe html.) Here's the line that does the encoding:
$toencode=~s/([^a-zA-Z0-9_.-])/uc sprintf("%%%02x",ord($1))/eg;

I call "LOOP!" on this one... we've now come back to where the discussion started. :)

For what it is worth, I think fixing this would cause security holes to occur in the real world, so I would suggest we not do that. OTOH, I don't use that plugin _because_ it is broken so I'd like to see it fixed even if we have to rename it or add an option.

--mark

_______________________________________________
templates mailing list
[email protected]
http://lists.template-toolkit.org/mailman/listinfo/templates

Reply via email to