> 1) XML(post.content) is vulenrable to XSS injections. Do XML
> (post.content,sanitize=True) instead.

I'll do it

> 2) XML(post.content[0:500]) may (and will) truncate some tags. What if
> for example post content[0:500]='bla bla ... bla <a href="http' it
> will mess up your page very badly. sanitize=True will fix the problem
> in this case but the output will not look nice as you's expect.

Now, I define a comment <!--more--> where I want generate the break of
the post in my RichText Editor. This solved my problem.

thanks for any help

-- Leandro.
-- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To post to this group, send email to web...@googlegroups.com.
To unsubscribe from this group, send email to 
web2py+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en.


Reply via email to