[Typo3-dev] RFC: Bug #277: utf-8 + JSMENU/feAdminLib

[Bernhard Kraft]

Ernesto Baschny [cron IT] wrote:

> The only conflict is the above mentioned $confirm outputting. I've added
> a htmlspecialchars around it, while Bernhard didn't. Isn't that needed,
> Bernhard, since we are in a (X)HTML-attribute?


Of course ! if you are not inside a <script> tag you will need to feed it through
htmlspecialchars ! But you MUST NOT feed it through specialchars if it IS inside a
script tag - else you will see the entities undecoded.


greets,
Bernhard