Interestingly enough there was recently a long debate about xss escaping
over in the Mojo irc channel. They obviously have their own temptation
engine which uses Mojo::DOM in parts (which includes the xss_escape code).

I'm envisioning the we'll end up needing to do that digging into
Template::Stash::AutoEscaping and would suggest whoever does perhaps bases
some enhancements on the mojo code ;-)

For reference: http://irclog.perlgeek.de/mojo/2016-02-09#i_12010985 ,
https://github.com/kraih/mojo/commit/ccbd7e92ffe2029e83f14e077095d6ddda27cd1c

Martin
_______________________________________________
Koha-devel mailing list
[email protected]
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to