I have implemented escaping HTML from within WW tags. Basically, I added an
escape property to PROPERTY tag which is used for all UI tags and thus will
escape them as well. By default, I have PROPERTY escaping. I have a few
questions before I commit this.

1. What exactly do we need to escape? All UI tags - body and attributes?
2. Should PROPERTY escape by default?


-Matt



_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
Webwork-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/webwork-user

Reply via email to