>> But I thought that the use of innerHTML was frowned upon, or is that > > not the case? > > There are different opinions. > http://www.robertnyman.com/2006/04/20/we-all-love-innerhtml/ The argument is simple enough: - Calling a URL (with proper template and stuff) and inserting that output somewhere with innerHTML => GOOD - Using s = "<input value='" + value + "'>" to save a few lines of code => BAD In the first case, you might as well parse the DOM, and insert that DOM element, except that innerHTML is more supported. I did that in strict XHTML where innerHTML was not available. In the second case, switching to DOM manipulation will do no good, you need to change the programmer (as in "educate || replace") or SQL injections and the like will grow eyes and bite hard. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/turbogears?hl=en -~----------~----~----~----~------~----~------~--~---
