[geeklog-devtalk] Special character handling

Euan McKay euan at heatherengineering.com
Mon Nov 8 20:30:36 EST 2004


Even if this doesn't make it into the core, I'm for something like
this. Please can you remember those of us using double-byte characters
while you're doing this though. If you need any code tested with
Japanese strings, let me know.

Cheers,

Euan.

*************************************************
Heather Engineering - no job too small
http://www.heatherengineering.com/
info at heatherengineering.com/
*************************************************

On 2004/11/09, at 3:19, Christopher Wolfe wrote:


> Following some glitches that caught my attention in the 1.3.8 codebase

> I went digging through the special character handling in the current

> CVS version. Assuming I am reading the code correctly, COM_applyFilter

> (in addition to doing other things) now cuts string parameters off at

> the first quote/tick/semicolon/backslash.

>

> Obviously this is a bit of a problem, as COM_applyFilter is used on

> things like the search and highlight strings. In addition I think it

> would make the code cleaner if it were usable on every user-supplied

> input (though opinions will vary on that). Any current thoughts/plans

> for fixing this?

>

> Experimenting on my local copy, I plugged a pseudo-URL encoder into

> COM_applyFilter, and it doesn't look to have broken anything (escaped

> everything but alphanumerics, space to +, others to %FF). Using the

> HTML character entities would probably be nicer for output, as I

> suspect COM_applyFilter removing semi-colons is unnecessary, but

> decided to be lazy. Both formats are conveniently safe inside PHP and

> SQL quoted strings.

>

> If there is nothing in the pipe I will start walking HTML character

> entities through a proper data trace.

>

> Side note: finished a few new plugin hooks in to allow plugins to add

> commands to the story submission page and comment listing (by delete).

> The associated plugins have been scrapped due to lack of interest, but

> I can provide the hook patches to anyone interested.

>

> Chris

> _______________________________________________

> geeklog-devtalk mailing list

> geeklog-devtalk at lists.geeklog.net

> http://lists.geeklog.net/listinfo/geeklog-devtalk

>

>





More information about the geeklog-devtalk mailing list