webwork-devel

[Matt B. <ma...@sm...>]

I have implemented escaping HTML from within WW tags. Basically, I added an
escape property to PROPERTY tag which is used for all UI tags and thus will
escape them as well. By default, I have PROPERTY escaping. I have a few
questions before I commit this.

1. What exactly do we need to escape? All UI tags - body and attributes?
2. Should PROPERTY escape by default?


-Matt