[TYPO3-core] RFC #13940 Preventing SQL injections in CONTENT object

[Martin Holtz]

Hi Jigal,

if you define an string with comma in it:
  markers {
     name = firstname
     name.wrap = |, lastname
  }
your patch quotes both parts separatly:

name = 'firstname','lastname'
I would expect:
name  = 'firstname, lastname'

The reason is the part, which checks for a comma separated list. But the 
only possiblity i see is to use an option "name.commaSeparatedList = 1".

what do you think?
martin