1. 08 3月, 2007 9 次提交
  2. 07 3月, 2007 1 次提交
    • J
      gitweb: Don't escape attributes in CGI.pm HTML methods · edc04e90
      Jakub Narebski 提交于
      There is no need to escape HTML tag's attributes in CGI.pm
      HTML methods (like CGI::a()), because CGI.pm does attribute
      escaping automatically.
      
        $cgi->a({ ... -attribute => atribute_value }, tag_contents)
      
      is translated to
      
        <a ... attribute="attribute_value">tag_contents</a>
      
      The rules for escaping attribute values (which are string contents) are
      different. For example you have to take care about escaping embedded '"'
      and "'" characters; CGI::a() does that for us automatically.
      
      CGI::a() does not HTML escape tag_contents; we would need to write
      
        <a href="URL">some <b>bold</b> text</a>
      
      for example. So we use esc_html (or esc_path) to escape tag_contents
      as needed.
      Signed-off-by: NJakub Narebski <jnareb@gmail.com>
      Signed-off-by: NJunio C Hamano <junkio@cox.net>
      edc04e90
  3. 06 3月, 2007 15 次提交
  4. 05 3月, 2007 14 次提交
  5. 04 3月, 2007 1 次提交