diff options
| author | Eric Wong <e@yhbt.net> | 2020-02-15 09:46:39 +0000 |
|---|---|---|
| committer | Eric Wong <e@yhbt.net> | 2020-02-16 00:06:48 +0000 |
| commit | 1fee6f86d7ee78161cc48a00232654f13a14bb88 (patch) | |
| tree | 4bc0018a153537cd3005bf87fb5fec7b6dde17d3 /README | |
| parent | 4c4de0022f40e09c4db7665cc573a3cb94f753a3 (diff) | |
| download | public-inbox-1fee6f86d7ee78161cc48a00232654f13a14bb88.tar.gz | |
We need to escape ampersands (and some other characters for href attributes), so introduce a `mid_href' sub to do just that. '<', '>' and '"' were always escaped, so there's no risk of tag or attribute injection, but creative Message-IDs could cause confusion for some parsers and generate invalid URLs. Start getting rid of the bloated, over-engineered OO Hval API while we're at it, I only noticed this bug because I started killing off Hval->new* callers.
Diffstat (limited to 'README')
0 files changed, 0 insertions, 0 deletions