[Catalyst] Re: {OT] protecting against attacks with multilingual input

[A. Pagaltzis]

* Jonathan Rockway <jon at jrock.us> [2006-12-05 22:10]:
> You need to escape &, <, >, ", and '.

    s[([<>&"'])]{ '&#' . ord( $1 ) . ';' }ge;

Regards,
-- 
Aristotle Pagaltzis // <http://plasmasturm.org/>