[ZPT] Re: [Zope] prevent quoting in tal:attributes

Fergal Daly fergal at esatclear.ie
Mon Sep 29 19:24:15 EDT 2003


On Monday 29 September 2003 18:04, Dieter Maurer wrote:
> Being no valid XML entities is not a problem at all.
> It is an SGML application and may use SGML entities, more precisely,
> the entities defined in the doc type.

If TAL was an SGML system then it would be no problem, however, it's not, it's 
for X(HT)ML and I think you'll have a hard time convincing people to add 
extra complications to cope with anything outside that. There are some things 
with purely XML entities that TAL cannot do but these are rather unused parts 
of XML when it comes to web development, so they are not missed.

If you're going to ask for a "structure" that works on attributes then it 
should escape everything except entities. That is it would still escape ", ' 
etc but would turn

hello &name; "how are you"

into

hello &name; "how are you"

and

hello &name"how are you"

into

hello &name"how are you"

because the ; was missing from &name. At least that way the document will 
always be well formed,

F




More information about the ZPT mailing list