On Thu, Nov 22, 2007 at 04:35:56PM +1100, Steve Bennett wrote:
On 11/22/07, Jay R. Ashworth jra@baylink.com wrote:
My opinion is that each block of code should do it's think, and no one else's thing. DJB's a whackjob, but on this point, he hews correctly to those who created this OS we pray to daily...
That doesn't help. Is parsing &foo; a parser "thing" or a clean/tidy/secure HTML "thing"?
That depends on what you're parsing it for.
If you're parsing it to decide to drop it because you think it's unsafe, I would say that a post-parser tidy pass should do it.
Cheers, -- jra