simetrical@svn.wikimedia.org wrote:
Log Message: ----------- Right angle bracket never needs to be escaped except "when it appears in the string "]]>" in content, when that string is not marking the end of a CDATA section." No point in escaping it other times (even when it follows a literal left angle bracket, since that will already be escaped). http://www.w3.org/TR/2006/REC-xml-20060816/#syntax
Nick has recommended ensuring stray >s are escaped as a defensive measure, making it harder to build a working HTML element if something else gets mis-escaped.
I'm not sure how much concrete danger there is, but the idea gives me warm fuzzies.
-- brion vibber (brion @ pobox.com)
On 11/17/06, Brion Vibber brion@pobox.com wrote:
simetrical@svn.wikimedia.org wrote:
Log Message: ----------- Right angle bracket never needs to be escaped except "when it appears in the string "]]>" in content, when that string is not marking the end of a CDATA section." No point in escaping it other times (even when it follows a literal left angle bracket, since that will already be escaped). http://www.w3.org/TR/2006/REC-xml-20060816/#syntax
Nick has recommended ensuring stray >s are escaped as a defensive measure, making it harder to build a working HTML element if something else gets mis-escaped.
I'm not sure how much concrete danger there is, but the idea gives me warm fuzzies.
Ah, okay. I'll roll it back now with a comment in the parser test (if there wasn't one I missed).
wikitech-l@lists.wikimedia.org