mirrors/htmlpurifier
0
0
Fork 0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2024-11-09 23:28:42 +00:00
Code Releases Activity

Typographical and linkrot fixes for UTF-8 doc.

Browse Source 
git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/trunk@1308 48356398-32a2-884e-a903-53898d9a118a
This commit is contained in:
Edward Z. Yang 2007-07-05 16:50:48 +00:00
parent 35487c02ae
commit 626b2a13c8
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/enduser-utf8.html
View File

@ -231,7 +231,7 @@ of your real encoding.</p>
why the character encoding should be explicitly stated. When the why the character encoding should be explicitly stated. When the
browser isn't told what the character encoding of a text is, it browser isn't told what the character encoding of a text is, it
has to guess: and sometimes the guess is wrong. Hackers can manipulate has to guess: and sometimes the guess is wrong. Hackers can manipulate
this guess in order to slip XSS pass filters and then fool the this guess in order to slip XSS past filters and then fool the
browser into executing it as active code. A great example of this browser into executing it as active code. A great example of this
is the <a href="http://shiflett.org/archive/177">Google UTF-7 is the <a href="http://shiflett.org/archive/177">Google UTF-7
exploit</a>.</p> exploit</a>.</p>
@ -567,10 +567,11 @@ which may be used by POST, and is required when you want to upload
files.</p> files.</p>
<p>The following is a summarization of notes from <p>The following is a summarization of notes from
<a href="http://ppewww.physics.gla.ac.uk/~flavell/charset/form-i18n.html"> <a href="http://web.archive.org/web/20060427015200/ppewww.ph.gla.ac.uk/~flavell/charset/form-i18n.html">
<code>FORM</code> submission and i18n</a>. That document contains lots <code>FORM</code> submission and i18n</a>. That document contains lots
of useful information, but is written in a rambly manner, so of useful information, but is written in a rambly manner, so
here I try to get right to the point.</p> here I try to get right to the point. (Note: the original has
disappeared off the web, so I am linking to the Web Archive copy.)</p>
<h4 id="whyutf8-forms-urlencoded"><code>application/x-www-form-urlencoded</code></h4> <h4 id="whyutf8-forms-urlencoded"><code>application/x-www-form-urlencoded</code></h4>