This repository has been archived by the owner on Jun 21, 2022. It is now read-only.

Encode URLs in HTML attributes #160

Open

dboehmer opened this issue Jul 5, 2021 · 0 comments

Owner

dboehmer commented Jul 5, 2021

In another project I just realized that URLs may not be simply pasted in HTML element attributes.

Special characters are in fact URL-encoded but URLs like foo?a=1&b=2 might contain & which is a reserved character in HTML.

$ ack '="\[% .*url' root/templates/
root/templates/project/import.tt
3:<form method="post" action="[% import_url %]" class="import">

...

Rough estimate: >200 occurrences

Could be solved with #120

The text was updated successfully, but these errors were encountered:

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.