[PL #2900] PlanetLabConf XML output should be sanitized

Mark Huang via RT devel at planet-lab.org
Sat Nov 6 12:29:15 EST 2004


Email Recipients (see http://www.planet-lab.org/Support)
       Requestor: mlhuang at cs.princeton.edu


==================================================

> [mlhuang - Tue Nov 02 15:11:37 2004]: 
>  
> PlanetLab XML output should be sanitized and the appropriate 
reserved  
> characters (e.g. '<', '>', '"', etc.) escaped automatically. 
>  
> --Mark 
 
Even more annoying is that you have to escape the characters yourself 
on the website form before submitting 
 
https://www.planet-lab.org/db/plnodeconf/ 
 
or else incorrect XML is generated. Common characters that need to be 
escaped include & (&amp;), < (&lt;), and > (&rt;). This part might 
just be a PHP fix, I'll look into it. 




More information about the Devel-community mailing list