Hi,
I am considering how to replace newline (\n) with <br/>. At first, I
tried this:
XML('<br \>'.join(content.split('\n')))
It works, but however, it is very dangerous. Bad guys can inject evil
html code into my site if I forget to escape HTML tags. Is there
explicit way to achieve this with TurboGears and kid template engine?
If there is no such common function, it might be dangerous for people
who write these code to replace newline char but forgot to escape html
syntax.
Thanks.
Victor Lin.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"TurboGears" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/turbogears?hl=en
-~----------~----~----~----~------~----~------~--~---
