[twdev] Re: Prototype for tiddler input validation/sanitation in TiddlyWeb

2009-06-23 Thread cd...@peermore.com
On Jun 23, 8:16 am, Oveek wrote: > Minor hiccup with the addition of the validation code. After its > introduction, the policies table (assuming sqlstore) is expected to > have the new 'accept' column. But when using an older sqlstore > instance without an 'accept' column, the latest tiddlyweb ma

[twdev] Re: Prototype for tiddler input validation/sanitation in TiddlyWeb

2009-06-23 Thread Oveek
My progress was recently stymied for a while by a server related issue, but I've got that sorted now. Minor hiccup with the addition of the validation code. After its introduction, the policies table (assuming sqlstore) is expected to have the new 'accept' column. But when using an older sqlstore

[twdev] Re: Prototype for tiddler input validation/sanitation in TiddlyWeb

2009-06-16 Thread Martin Budden
Makes sense. It's just a bit of a pity that we have to choose an non-intuitive name to get the defaults the right way round. Martin 2009/6/16 cd...@peermore.com : > > On Jun 16, 2:48 pm, Martin Budden wrote: >> a (perhaps) stupid question > > I thought we all agreed a long time ago that there a

[twdev] Re: Prototype for tiddler input validation/sanitation in TiddlyWeb

2009-06-16 Thread cd...@peermore.com
On Jun 16, 2:48 pm, Martin Budden wrote: > a (perhaps) stupid question I thought we all agreed a long time ago that there are no stupid questions? > Why do you call the policy constraint "accept"? You call the > constraint "accept", and validate if it is not set. > > Why not call the policy con

[twdev] Re: Prototype for tiddler input validation/sanitation in TiddlyWeb

2009-06-16 Thread Martin Budden
Chris, a (perhaps) stupid question Why do you call the policy constraint "accept"? You call the constraint "accept", and validate if it is not set. Why not call the policy constraint "validate", and only validate when it is set? I'm not arguing about which way the default is, just about how mu

[twdev] Re: Prototype for tiddler input validation/sanitation in TiddlyWeb

2009-06-16 Thread cd...@peermore.com
On Jun 16, 12:16 am, mahemoff wrote: > Thanks for the update Chris. The flexible validation model makes sense > - in the medium-to-long term I would also like to see TiddlyWeb ship > with a default validator that allows for general HTML content, that > does the usual Javascript stripping, matchin

[twdev] Re: Prototype for tiddler input validation/sanitation in TiddlyWeb

2009-06-15 Thread mahemoff
Thanks for the update Chris. The flexible validation model makes sense - in the medium-to-long term I would also like to see TiddlyWeb ship with a default validator that allows for general HTML content, that does the usual Javascript stripping, matching HTML tags, and so on. Perhaps one that is ea