[Date Prev][Date Next][Thread Prev][Thread Next]
[Date Index]
[Thread Index]
- Subject: Re: strip_tags - HTML tag stripper
- From: "Jim Whitehead II" <jnwhiteh@...>
- Date: Tue, 22 Apr 2008 08:18:59 -0700
> This <a href="blah" onClick="<script src='foo'></script>">Link</a> is not
> even XML... I wonder how an XML parser could consider the part <script
> src='foo'></script> a tag. It is just the value of an attribute and as such,
> it should first be escaped to be correct. But it is not and will never be a
> tag, except with a Jim Whitehead II's xml parser :)
Forgive my typo, but I thought it was clear what I was asking for.
- Jim
