[Catalyst] html escaping question

Mario Minati mario.minati at googlemail.com
Wed Mar 21 11:29:32 GMT 2007


Am Mittwoch 21 März 2007 10:38 schrieb Ash Berlin:
> Mario Minati wrote:
> > Hello @all,
> >
> > as you could help me that fast and excellent yesterday I have an other
> > question to you ;)
> >
> > What is the best/common practice to get text that might containt html
> > escapable characters (e. g. '&', '<') from a form field to catalyst to db
> > and back to form field?
> >
> > At the moment I'm thinking of not doing any html escaping at all and
> > believe in unicode to handle the encoding correctly, but I would ran into
> > problems with '<funname>'.
> >
> > So if I escape a string and send it back to the form the content of the
> > textfield is '&lt;funame&gt;'. Why is that?
> >
> > Again every thought is allmost welcome.
> >
> > Greets,
> > Mario Minati
>
> I'll asume you are using TT since you didn't say otherwise'
>
> [% '<funname>' | html %]


You mean I have to filter every form field that way? 
Or do you mean normal text content?

I hope there's a smoother solution otherwise this would be quite a bit of 
work.

How are others solving the problem with this kind of characters in unicode 
enabled websites?

Greets,
Mario



More information about the Catalyst mailing list