perl-embperl mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Torsten Luettgert <t.luettg...@pressestimmen.de>
Subject No quoting of " (&quot;) ?
Date Tue, 30 Nov 2004 18:50:18 GMT
Hello,

today, I hit another problem with my (now fully utf-8'ed) Embperl
web site.
I'm not sure if this was always so or if it came with my UTF-8
switch, but characters like quotation marks (") are not quoted any
longer. This simple example shows it:

[- $fdat{'foo'} = '"><a href="http://www.slashdot.org">slashdot</a>'; -]
<input type="text" name="foo">

This results in an empty text field followed by the given link to
slashdot. This is of course very dangerous, since one could insert
javascript code or anything.

I *guess* that regular expressions which should replace the " by &quot;
now don't work since they intermix strings with and without utf-8 flag.

I did rename epchar.c.min to epchar.c, but that still contains the
&quot; quoting, so I guess that's not it.

Can you shed some light, please, Gerald?

Greetings,
Torsten LĆ¼ttgert



---------------------------------------------------------------------
To unsubscribe, e-mail: embperl-unsubscribe@perl.apache.org
For additional commands, e-mail: embperl-help@perl.apache.org


Mime
View raw message