Re: Guarding against injection while using AJAX.

2009-05-29 Thread Tom Evans
On Fri, 2009-05-29 at 11:38 -0700, Roberto Cea wrote: > I am accepting user input using the Jeditable library for jQuery, > which sends the data as POST parameters "id" and "value". I am reading > these parameters into a django.forms.Form to sanitize it, like so: > > class EditInPlaceForm(forms.F

Guarding against injection while using AJAX.

2009-05-29 Thread Roberto Cea
I am accepting user input using the Jeditable library for jQuery, which sends the data as POST parameters "id" and "value". I am reading these parameters into a django.forms.Form to sanitize it, like so: class EditInPlaceForm(forms.Form): id = forms.CharField() value = forms.CharField()