You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Default values of input tags are not escaped, which can cause invalid html syntax for some characters (" for instance).
E.G.:
<inputid="form_answer" type="hidden" name="form_answer" style="display: none;" value="# effacez ce commentairex=input()if x in ["success",]:
print(x)
if x=="failure":print("NON c'est pas ca")
if x=="error":print(1/0)
">
instead of:
<inputid="form_answer" type="hidden" name="form_answer" style="display: none;" value="# effacez ce commentairex=input()if x in [&quot;success&quot;,]: print(x)if x==&quot;failure&quot;: print(&quot;NON c'est pas ca&quot;)if x==&quot;error&quot;: print(1/0)
">
The text was updated successfully, but these errors were encountered:
The following file solves the problem for the editor where the problem is the most frequent: https://github.com/nimdanor/python-pl-bank/blob/master/form/text_editor.html
This file should be in the /lib/form dir ... @qcoumes can I make you remark that :
The syntax
@ /form/text_editor.html
that search locally then search in /lib/form/text_editor.html is VERY HELPFULL in this case.
Default values of
input
tags are not escaped, which can cause invalid html syntax for some characters ("
for instance).E.G.:
instead of:
The text was updated successfully, but these errors were encountered: