Changes between Version 14 and Version 15 of GenshiRecipes/PylonsWithGenshi

Timestamp:

Sep 5, 2008, 10:25:01 PM (16 years ago)

Author:

myownlittlworld@…

Comment:

Added a warning about automatically wrapping web-helper objects, potentially unsafe.

GenshiRecipes/PylonsWithGenshi

@@ -38 +38 @@
 Finally, the Pylons template plug-ins currently expect paths to act as module imports, so you will also need to create an empty `__init__.py` file inside appname/templates.
 == !WebHelpers and Genshi ==
-To use [http://pylonshq.com/WebHelpers/ WebHelpers] within a Genshi template, the helper return values need to be wrapped in a Markup object, as it would otherwise be escaped.
+To use [http://pylonshq.com/WebHelpers/ WebHelpers] within a Genshi template, the helper return values need to be wrapped in a Markup object, as it would otherwise be escaped.  Think carefully before following this suggestion, however, as this effectively works around the white-listing effect of the Markup object, automatically running any HTML that users may submit to your site.  It is safer (albiet much more annoying) to manually wrap specific WebHelpers in your pages.
 
 === The Hard Way ===