From: Steve W. <sw...@pa...> - 2002-02-21 16:08:35
|
Adam Shand wrote: >>>ah, i was orgininally thinking that we could just enable the comment >>>html tag and let it pass through to the browser since it won't be seen. >>> it didn't occur to me that there was a simpler alternative :) >>> >>Ooh. We could do that, too. Still not a problem, I think, as long as >>the comment text is htmlspecialchar()ed ('<' -> '<'). >> > > if it can be done without security risks then that would be my vote. > the information isn't secret, just not displayed, so we may as well pass > it to the browser, it might be useful for something. Well, I'll be the curmudgeon here and voice two objections: one, the comment will appear in the HTML source and likely won't make any sense to the end user who views it (and won't know it came from the Wiki markup); and two, we are arbitrarily letting some HTML through and not others, like <i> and its kin; so we now send a confusing message to end users ("HTML is not allowed! Use HTML comments for your Wiki markup!") My preference would be for Wiki-specific comment tags; but thinking of Ari's approach, there is no equivalent in the course of normal writing (except "asides" like this statement in parentheses). Maybe ((I am a comment)) would suffice. Flame me as you must. ~swain |