From: Jeff D. <da...@da...> - 2002-02-21 04:42:23
|
On 20 Feb 2002 19:59:52 -0800 "Adam Shand" <ad...@pe...> wrote: > > I can't see how it could be a security risk. OTOH, both new and old > > isn't javascript and other such stuff embedded in comment strings? Yes it is, but... The whole point of the comment syntax is that the comments don't get sent to the browser. That makes it hard to do anything malicious with them. > will it interfere with people who might paste c code into a wiki? any > other languages that use // as a comment string? Good point. Though nearly any comment syntax will screw up pasting whatever kind of code the syntax is stolen from. Probably: don't allow/recognize comments within <verbatim> blocks. (Probably not within <pre> blocks either. Also you can always escape them: ~// This is not a comment. |