> The form I want to create contains a bunch of (hidden) input fields
> that need to be send to something else.  So I want a real form
> with a submit input, not a button.  And I want to create those
> hidden input fields.
>
> So I created the HTML myself and show it using Wt::WText with
> TextFormat set to XHTMLUnsafeText.
>
> But now I have to start wondering about properly quoting/escaping
> the values I set.  I potentionally also have to start wondering
> about XSS, but I don't think that's a problem in this case.
>
> I think the library should provide me ways to automate this, so
> that I don't have to worry about those things.  But I don't find
> anything in the documentation to:
> - create hidden input fields
> - create a submit button
> - set the method and action of a form
> - quote/escape the string for the input field
>

Hi Kurt,

There's a mechanism in Wt that may allow you to do what you want. See
the manual of WTemplate. If you can make your form a WTemplate, Wt
will still perform XSS filterning on the tags that you supply to the
template - I would expect that this will also be the visible text in
your case.

Can this approach solve your problems?

BR,
Wim.

------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________
witty-interest mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/witty-interest

Reply via email to