[Developers] html entity encoding

Nick Thompson nix at metaweb.com
Fri May 2 22:03:49 UTC 2008


it also escapes " to &dquo; so that the returned values
are safe in html attribute values as well as in html text.

     nick

Christopher Dummy wrote:
>>  needless to say, if you turn it off you dont want to be using html as
>>  a display medium without further sanitization.
> 
> Does it do other things than just escaping the <>& characters?
> 


More information about the Developers mailing list