Re: Suggestion on how to eliminate Cross-site-scripting (XSS) bugs for good.

Sam Tregar wrote:
> On Tue, 17 Oct 2006, Tom Heady wrote:
> 
>> Actually, I found that turning off escaping (ESCAPE="0") does not work
>> if you specify a default escape.
>>
>> See http://rt.cpan.org/Public/Bug/Display.html?id=18274 for more details
>> and a fix.
> 
> I'll make sure this gets into the next release.  I'm planning to put
> one out soon.
> 

Thanks

Tom


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV