Re: URL encoding and the "+" char

Wednesday, June 2, 2010, 2:16:20 PM, Attila Szegedi wrote:

> On 2010.06.02., at 11:48, Daniel Dekany wrote:
>
>> except that everyone used to forget about the
>> last. Including us, BTW, but since FM is not XML-aware and users would
>> never remember writing ${stuff?cdata}, it doesn't mater much in
>> practice.)
>
> Yeah, escaping for CDATA, now that feels so wrong :-)

I wonder how many systems can be confused by that by normal users. :->
Just consider, you can inject whatever markup you want, while the
system believes the injected stuff is safely enclosed inside a CDATA
section, and so it doesn't escape less-than and like, doesn't look for
certain tags... (No wonder I'm not a big fan of the idea of
output-format-unaware templates languages...)

> Attila.

-- 
Best regards,
 Daniel Dekany


------------------------------------------------------------------------------