SVN: r21497 - trunk/quixote
Andrew Kuchling <akuchlin-fVcApmY9cLvQ3/1i3zOLAti2O/[email protected]> Thu, 01 May 2003 08:00:23 -0400
| Newsgroups | gmane.comp.web.quixote.cvs |
|---|---|
| Message-ID | <[email protected]> |
Author: akuchlin
Date: 2003-05-01 08:00:21 -0400 (Thu, 01 May 2003)
New Revision: 21497
Modified:
trunk/quixote/CHANGES
Log:
Fix unfinished sentence
Modified: trunk/quixote/CHANGES
==============================================================================
--- trunk/quixote/CHANGES (original)
+++ trunk/quixote/CHANGES 2003-05-01 08:00:23.000000000 -0400
@@ -129,7 +129,9 @@
If the 'title' argument is something like "R&D", it will
automatically be converted to "R&D" following the rules
for escaping HTML special characters. The aim is to avoid cross-site
- scripting attacks by automatically
+ scripting attacks by removing the need for the programmer to remember
+ to HTML-escape unsafe text, instead relying on Quixote to
+ escape text where necessary.
See doc/PTL.txt for more information about how this works.