Hi Caroline, well spotted. There are places in both the wsdl generation and in the xmlrpc binding that we generate xml by simply sticking strings together ( I searched for "</" ).
We should probably edit the variables that we are using to make sure they don't contain dodgy characters. I think they are only ever values that we pull out of the annotations e.g. from @param and so forth, but we should be careful. I will raise a pecl bug to track it. Matthew On Nov 23, 4:33 pm, Caroline Maynard <[EMAIL PROTECTED]> wrote: > > this. Even if that gets fixed though, I don't think we can always depend > > on Tuscany - the SCA code generates some xml itself in places, does it > > not? - so we have to be prepared with the htmlentities($in, ENT_QUOTES) > > or its internal equivalent, I think. > > ... but not substituting within CDATA sections, of course ... --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "phpsoa" group. To post to this group, send email to phpsoa@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.co.uk/group/phpsoa?hl=en -~----------~----~----~----~------~----~------~--~---
