Menu

#29 Blog titles not HTML escaped

open
nobody
None
5
2006-08-24
2006-08-24
No

I'm on Windows XP SP2 with Sun's Java version 1.5.0.6

If I post a blog entry containing reserved HTML chars
(<>", etc), they will not be escaped, so this title:

"Testing the <pre> tag"

will inline the <pre> tag, and break the title, rather
than generating:

"Testing the &lt;pre&gt; tag"

The simple workaround is of course to make sure all
content is HTML-safe, but it'd be nice if
Thingamablog's "renderer" could escape HTML-sensitive
text.

Best wishes,
- Kim Gräsman

Discussion


Log in to post a comment.

MongoDB Logo MongoDB