Re: smarty|escape

"B. Kamer" <[email protected]> Fri, 3 Jun 2005 12:41:52 +0200
Newsgroups gmane.comp.lib.binarycloud.devel
Message-ID <[email protected]>
On Jun 3, 2005, at 12:26, Jean-Christophe Michel wrote:

> B. Kamer wrote:
>
>> For the record, its seems logical to me that the application (the
>> nodes) shouldn't be responsible for escaping values before  
>> feeding  them
>> to the render engine...
>>
>
> Sure!
>
>
>> Before I add escapes left and right I would like your opinions on   
>> this...
>>
>
> My .02 c: isn't escape needed for js values only ?

you mean javascript? Why would it be? Javascript doen't like &amp;

I believe htmlall escaping for html is a 'service' to browsers who  
are not comfortable with the doctype. So instead of them having to  
figure out what a é should render as (which could be any character if  
you don't know the document encoding) we help these browsers by  
htmlencoding these characters...

Also this way, xhtml stay valid even if you put a '&' as content.  
This is even more true for normal html and the < > signs...

html escaping, just remove &, <, >, ', " and is usefull when you need  
to put something as a value in html-tag parameter.


>
> -- 
> Jean-Christophe Michel
> _______________________________________________
> dev mailing list
> dev-PnctHDZWAvB/Cz2I37pSEPZ4XP/[email protected]
> http://lists.binarycloud.com/mailman/listinfo/dev
>
>

_______________________________________________
dev mailing list
dev-PnctHDZWAvB/Cz2I37pSEPZ4XP/[email protected]
http://lists.binarycloud.com/mailman/listinfo/dev