Fwd: [Caja] secure string interpolation in javascript

"Mark Miller" <[email protected]>
Newsgroups gmane.comp.lang.e.general
Message-ID <[email protected]>
Like quasiliterals for JavaScript, but better.


---------- Forwarded message ----------
From: Mike Samuel <[email protected]>
Date: Jan 29, 2008 8:15 PM
Subject: [Caja] secure string interpolation in javascript
To: Google Caja Discuss <google-caja-discuss-/[email protected]>



http://google-caja.googlecode.com/svn/changes/mikesamuel/string-interpolation-29-Jan-2008/trunk/src/js/com/google/caja/interp/index.html
describes a scheme for adding string interpolation to javascript.
This is meant to allow open-social application developers to write XSS-
free code, should provide an API that's easily understood by PHP
developers, and should provide an easy migration path away from code
that uses string += to compose html.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to
http://groups.google.com/group/google-caja-discuss
To unsubscribe, email google-caja-discuss-unsubscribe-/[email protected]
-~----------~----~----~----~------~----~------~--~---




-- 
Text by me above is hereby placed in the public domain

    Cheers,
    --MarkM
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.