>>>>> "Jacob" == Jacob Davies <[EMAIL PROTECTED]> writes:

Jacob> <A HREF="/somehandler?email=<#EMAIL URLESC>">

That should actually be both URL escaped *and* HTML escaped if it
also contains &'s, like the form fields.

You probably knew that, but in case anyone else is watching.... :)

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<[EMAIL PROTECTED]> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Reply via email to