dquote text method and /
Felipe Gasper <[email protected]>
| Newsgroups | gmane.comp.lang.perl.modules.template-toolkit |
|---|---|
| Message-ID | <[email protected]> |
Just curious, what is the intended use of this method? It’s not safe for encoding text as JavaScript in a web page since it doesn’t escape / (e.g., “</script>” will pass through unaltered). PHP’s JSON encoder escapes the / character, I believe specifically to ensure that this isn’t a problem. While there are new vmethods coming into play, it’d be great if there were a method that also escaped /. -FG _______________________________________________ templates mailing list [email protected] http://mail.template-toolkit.org/mailman/listinfo/templates