On Sat, Nov 15, 2008 at 9:40 AM, alinome.net <[EMAIL PROTECTED]> wrote: > > I'm working off line on one of my sites, with the local server. It's > much faster and more confortable to edit all the files (pages, zones, > configs, css...) directly with the Vim editor, save the modifications, > refresh the browser and see the result. > > But I found something a bit annoying: in some pages, the "<" character > has been translated to the HTML entity ">", what makes the editing > harder. I know I can do a general substitution it the text every time, > but I wonder why this happen in certain pages. I guess it depends on > the last action used on them (create, edit or copy). > > May it would be possible, for a far far future version [:-)], to save > all sources without that modification? That would made many markups > simpler and faster too. I don't know how much deep this character > "duality" is in the kernel engine.
This is done in all pages except the code* pages. The reason, is it is absolutely essential to prevent XSS attacks on a site. If for example you could enter the < symbol directly into a page, you could create javascript, php, etc., scripts and any comment box on your site would give the hacker complete control of your site. This is why your code group pages must be carefully protected. Cheers, Dan --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "BoltWire" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/boltwire?hl=en -~----------~----~----~----~------~----~------~--~---
