Branch: Tag:

2001-03-15

2001-03-15 00:30:56 by Martin Stjernholm <mast@lysator.liu.se>

Use t_string for splice args to avoid any quoting. Use t_string when an
encoding is given to avoid any quoting prior to the one specified by the
encoding.

Rev: server/etc/modules/RXML.pmod/module.pmod:1.142
Rev: server/etc/modules/RXML.pmod/utils.pmod:1.18

7:   //!   //! Created 2000-01-21 by Martin Stjernholm   //! - //! $Id: utils.pmod,v 1.17 2001/03/14 01:02:10 mast Exp $ + //! $Id: utils.pmod,v 1.18 2001/03/15 00:30:56 mast Exp $         array return_zero (mixed... ignored) {return 0;}
73:    // No quoting of splice args. FIXME: Add    // some sort of safeguard against splicing    // in things like "nice><evil stuff='...'"? -  RXML.t_text : +  RXML.t_string :    p->type);    if (!p->type->entity_syntax) {    // Don't decode normal entities if we're outputting xml-like stuff.
101:    // No quoting of splice args. FIXME: Add    // some sort of safeguard against splicing    // in things like "nice><evil stuff='...'"? -  RXML.t_text : +  RXML.t_string :    p->type);    if (!p->type->free_text)    RXML.parse_error ("Unknown entity &%s; not allowed in this context.\n", entity);    return 0;   }