This is mainly to inform Koen yesterday about what I found out yesterday
after he went to bed. Might be of interest to others too.

I got hit by a recent change in script stripping on WTexts. As a
background : I have some WText's that must contain some unsafe script
stuff. Basically a href with an onclick handler. Before (2.1.4) I
could first set the text and then change the formatting to unsafexhtml.

Since CVS update from today I get a warning that the onclick handler is
stripped. From looking at the diff it seems the scriptstripping now
happens right inside the setting of the text instead of being delayed
untill actual use of the widget.

A quick reversal of the setText and setFormatting lines confirmed this :
no stripping going on anymore (this ain' t vegas!). All good and well,
except one tiny regression : you can't set an unsafe text by passing
it as an argument of the constructor because it gets stripped right
away. This used to be possible.

cu bart

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
witty-interest mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/witty-interest

Reply via email to