Re: Attribute quoting with backquotes in HTML::Parser
"Gisle Aas" <[email protected]>
| Newsgroups | gmane.comp.lang.perl.modules.lwp |
|---|---|
| Message-ID | <[email protected]> |
On 2/6/07, Alex Kapranoff <[email protected]> wrote: > Good day! > > I searched the archives and didn't find anything. Were there > discussions about supporting weird IE quoting with backquotes > (<img alt=`a b c`>)? I never heared a request for that before so I don't think so. > It seems that IE7 continues to implement it so HTML::Parser should > probably too at least with a non-default option. > > Currently, it is parsed as <img alt="`a" b="b" c`="c`">. > > What are the thoughts? Backquotes are mostly used in XSS exploits > nowadays and I have a hard time dealing with such attacks using > HTML::Parser. It seems kind of harmless (and easy) to support this so I'm not oposing it. What "rules" do IE follow when it can't find the matching ending backquote? -- Gisle Aas