On Jan 30, 2005, at 7:14 AM, Randal L. Schwartz wrote:
As an aside, you really need:
'<img src="'; file.name | uri | html; '">';
A file must be URI encoded to get rid of uri-bad chars, then HTML encoded to prepare it for HTML attribute value insertion.
I think the uri escaping is not necessary here -- the browser should worry about that. All you should need to do is the HTML character escapes. For showing it in text, then you do need the URI escape, or you might have spaces in the URL which will make it look funny in text...
Kinda opposite opinion of yours...
_______________________________________________ templates mailing list [email protected] http://lists.template-toolkit.org/mailman/listinfo/templates
