[ZPT] Re: [Zope] prevent quoting in tal:attributes
Fergal Daly
fergal at esatclear.ie
Mon Sep 29 19:24:15 EDT 2003
On Monday 29 September 2003 18:04, Dieter Maurer wrote:
> Being no valid XML entities is not a problem at all.
> It is an SGML application and may use SGML entities, more precisely,
> the entities defined in the doc type.
If TAL was an SGML system then it would be no problem, however, it's not, it's
for X(HT)ML and I think you'll have a hard time convincing people to add
extra complications to cope with anything outside that. There are some things
with purely XML entities that TAL cannot do but these are rather unused parts
of XML when it comes to web development, so they are not missed.
If you're going to ask for a "structure" that works on attributes then it
should escape everything except entities. That is it would still escape ", '
etc but would turn
hello &name; "how are you"
into
hello &name; "how are you"
and
hello &name"how are you"
into
hello &name"how are you"
because the ; was missing from &name. At least that way the document will
always be well formed,
F
More information about the ZPT
mailing list