On Thursday, October 4, 2012 5:50:25 PM UTC-4, jason wrote:
>
> (apologies for possible multiple posts--I've sent this twice to gmane 
> and it hasn't appeared) 
>
> I've implemented some sanitizing of public worksheets [1] and applied it 
> to demo.sagenb.org as a test.  The concerns from before were that 
> javascript was executing on the page, leading to malware being on the 
> page. 
>
>
return text.replace('<', '&lt;')

Wow, what a hammer; so does that just mean all the html structure becomes 
visible? (In the event that branch is reached.)

-- 
You received this message because you are subscribed to the Google Groups 
"sage-devel" group.
To post to this group, send email to sage-devel@googlegroups.com.
To unsubscribe from this group, send email to 
sage-devel+unsubscr...@googlegroups.com.
Visit this group at http://groups.google.com/group/sage-devel?hl=en.


Reply via email to