Re: smarty|escape
B.Kamer <[email protected]> Sun, 5 Jun 2005 14:44:54 +0200
| Newsgroups | gmane.comp.lib.binarycloud.devel |
|---|---|
| Message-ID | <[email protected]> |
On Jun 3, 2005, at 20:51, Jean-Christophe Michel wrote: > B. Kamer wrote: > > > >> I was speaking globally. All output must be escaped if it's is >> going to >> be (x)html... do you agree with that...? >> >> >> > > In an attribute="..." it's only necessary to escape " into \", > isn't it? :-) > > or \' if you use attribute='...' but,... to have valid xml (for xhtml) you must also escape < > and & (in attributes and content) _______________________________________________ dev mailing list dev-PnctHDZWAvB/Cz2I37pSEPZ4XP/[email protected] http://lists.binarycloud.com/mailman/listinfo/dev