Re: option to turn ESCAPE=HTML on by default

On Fri, 14 Oct 2005, Mark Stosberg wrote:

> I'm curious about what other people think about an option to
> turn ESCAPE=HTML on default, to protect against cross script scripting
> practices by default. 

Sure, sounds reasonable to me.

-sam


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl