[Xerte-dev] Re: Html escaping??

Julian Tenney Julian.Tenney at nottingham.ac.uk
Mon Sep 24 15:13:55 BST 2012


We already do some switching out of <> etc I the wizard when it write the xml so maybe there? If it's info the wizard is in charge of, It makes sense that the wizard makes sure it's writing good stuff out.

-----Original Message-----
From: xerte-dev-bounces at lists.nottingham.ac.uk [mailto:xerte-dev-bounces at lists.nottingham.ac.uk] On Behalf Of Pat Lockley
Sent: 24 September 2012 15:12
To: For Xerte technical developers
Subject: [Xerte-dev] Re: Html escaping??

won't that mess with the URL though?

On Mon, Sep 24, 2012 at 3:08 PM, Tom Reijnders <reijnders at tor.nl> wrote:
> This morning I had a nasty issue in the export module of Xerte Online 
> Toolkits.
>
> Someone had used the 'Link and icon' of bleedingImage, and the link 
> contained an '&' sign.
>
> The export code can't handle this at the moment (SimpleXML.load can't 
> read the resulting .xml) because the '&' is not escaped as '&amp';
>
> Are there other places where we do escape input texts? Where? What is 
> the best plave to fix this (in xot or in the wizard)?
>
> Tom
>
> --
> --
>
> Tom Reijnders
> TOR Informatica
> Chopinlaan 27
> 5242HM Rosmalen
> Tel: 073 5226191
> Fax: 073 5226196
>
>
> _______________________________________________
> Xerte-dev mailing list
> Xerte-dev at lists.nottingham.ac.uk
> http://lists.nottingham.ac.uk/mailman/listinfo/xerte-dev
>
> This message and any attachment are intended solely for the addressee 
> and may contain confidential information. If you have received this message in
> error, please send it back to me, and immediately delete it.   Please do not
> use, copy or disclose the information contained in this message or in 
> any attachment.  Any views or opinions expressed by the author of this 
> email do not necessarily reflect the views of the University of Nottingham.
>
> This message has been checked for viruses but the contents of an 
> attachment may still contain software viruses which could damage your computer system:
> you are advised to perform your own checks. Email communications with 
> the University of Nottingham may be monitored as permitted by UK legislation.
>

_______________________________________________
Xerte-dev mailing list
Xerte-dev at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte-dev



More information about the Xerte-dev mailing list