Re: option to turn ESCAPE=HTML on by default
Mathew Robertson <[email protected]>
| Newsgroups | gmane.comp.lang.perl.modules.html-template |
|---|---|
| Organization | Nielsen//NetRatings |
| Message-ID | <[email protected]> |
If this is going to happen, can we make it optional, as some of us dont want escaping. Mathew >>I'm curious about what other people think about an option to >>turn ESCAPE=HTML on default, to protect against cross script scripting >>practices by default. >> >> >Sure, sounds reasonable to me. > > ------------------------------------------------------- This SF.Net email is sponsored by: Power Architecture Resource Center: Free content, downloads, discussions, and more. http://solutions.newsforge.com/ibmarch.tmpl