En op 08 juni 2002 sprak Dave Hoover:
> Obviously, the easiest solution is to explicitly disallow stuff like that
> and force people (Ton & Eugene) to use the longer versions of the
> characters.  But I don't like that.

Neither do I.

>  Lars brought up the idea of using
> syntax like %00 to be interpreted as binary zero.  This isn't done
> automatically, but by checking off a checkbox on the submit page that would
> run CGI::unescape on the code prior to any processing, I think it could
> work.  What does everyone think about this?

That is one option. Alternatively, you could perhaps use <INPUT
TYPE="file"> to upload files.

> If the CGI::unescape option were implemented, we would be left with the
> problem of the post-mortem.  How should these characters be displayed?

$script =~ s#(\cM\cJ)#'<BR>'#ge;
$script =~ s#([\0-\x1f])#'<FONT COLOR="red">^'.($1^"\x40").'</FONT>'#ge;

(-ugene

-- 
To write is to delete. -- (,odfried |3omans

Reply via email to