SVN: r20470 - trunk/quixote/doc
Andrew Kuchling <akuchlin-fVcApmY9cLvQ3/1i3zOLAti2O/[email protected]> Mon, 27 Jan 2003 14:41:11 -0500
| Newsgroups | gmane.comp.web.quixote.cvs |
|---|---|
| Message-ID | <[email protected]> |
Author: akuchlin Date: 2003-01-27 14:41:10 -0500 (Mon, 27 Jan 2003) New Revision: 20470 Modified: trunk/quixote/doc/PTL.txt Log: Fix typo Modified: trunk/quixote/doc/PTL.txt ============================================================================== --- trunk/quixote/doc/PTL.txt (original) +++ trunk/quixote/doc/PTL.txt 2003-01-27 14:41:11.000000000 -0500 @@ -168,7 +168,7 @@ It is also recommended that the ``htmltext`` constructor be used as sparingly as possible. The reason is that when using the htmltext -feature of PTL, explict calls to ``htmltext`` become the most likely +feature of PTL, explicit calls to ``htmltext`` become the most likely source of cross-site scripting holes. Calling ``htmltext`` is like saying "I am absolutely sure this piece of data cannot contain malicious HTML code injected by a user. Don't escape HTML special characters