On 11/22/07, Mark Clements gmane@kennel17.co.uk wrote:
I think he means pass the contents of <nowiki> through htmlspecialchars() before outputting.
Yes, but all that is assuming the <nowiki> is not embedded inside anything else. How should all the following behave:
[[<nowiki>image</nowiki>:foo.jpg]] [[image:<nowiki>foo</nowiki>.jpg]] [[image:foo.jpg|<nowiki>right</nowiki>|thumb]] [http://foo.com<nowiki></nowiki>bloot] (this one actually works currently, so my "token separator, not whitespace" comment may be wrong) [<nowiki>http</nowiki>://foo.com] <nowiki><b></nowiki>bold</b> <b <nowiki>style="bloot;"</nowiki>
etc etc.
Steve