Re: [htmltmpl] The sf.net Subversion Repository and the Phalanx One

2006-11-16 Thread Shlomi Fish
On Thursday 16 November 2006 11:43, Shlomi Fish wrote: > On Wednesday 15 November 2006 22:59, Sam Tregar wrote: > > On Wed, 15 Nov 2006, Shlomi Fish wrote: > > > A question if I may. Why weren't the tests and other changes that > > > were done to t

Re: [htmltmpl] The sf.net Subversion Repository and the Phalanx One

2006-11-16 Thread Shlomi Fish
On Wednesday 15 November 2006 22:59, Sam Tregar wrote: > On Wed, 15 Nov 2006, Shlomi Fish wrote: > > A question if I may. Why weren't the tests and other changes that > > were done to the Phalanx work on HTML-Template: > > > > * http://svn.perl.org/phalanx/HTML-Te

[htmltmpl] The sf.net Subversion Repository and the Phalanx One

2006-11-15 Thread Shlomi Fish
https://svn.sourceforge.net/svnroot/html-template/ I'd like to know that so I can proceed with writing the module I mentioned in the previous thread. Regards, Shlomi Fish ----- Shlomi Fish [EMAIL PROTECTED] Homepage:

Re: [htmltmpl] Suggestion on how to eliminate Cross-site-scripting (XSS) bugs for good.

2006-11-15 Thread Shlomi Fish
ew code > > is complete. > > Please dont use "TEXT" to mean none - there is at least one filter > that has been posted on this list which is for 'text' documents. > ie: the filter is like the HTML filter, but also handles newlines & > carriage return

Re: [htmltmpl] Suggestion on how to eliminate Cross-site-scripting (XSS) bugs for good.

2006-11-15 Thread Shlomi Fish
On Thursday 26 October 2006 01:07, Jonathan Lang wrote: > Shlomi Fish wrote: > > Having read the thread, I don't think that's enough for me. I want to > > still need to explicitly specify "ESCAPE=HTML" everywhere (without having > > a default escape), to

Re: [htmltmpl] Suggestion on how to eliminate Cross-site-scripting (XSS) bugs for good.

2006-10-25 Thread Shlomi Fish
On Tuesday 17 October 2006 14:08, Alex Kapranoff wrote: > * Shlomi Fish <[EMAIL PROTECTED]> [October 17 2006, 14:23]: > > Now what I want is to sub-class HTML::Template so we'll always have to > > use "ESCAPE=HTML". If we want to override it we'll

[htmltmpl] Suggestion on how to eliminate Cross-site-scripting (XSS) bugs for good.

2006-10-17 Thread Shlomi Fish
lock returns undef. 3. Add a special parameter to TMPL_VAR: <<<<<< >>>>>> - If we pass a simple string then we can only use the TMPL_VAR with ESCAPE="HTML" added. We can also use ESCAPE="HTML" on an unlocked object