X-Git-Url: http://git.tremily.us/?a=blobdiff_plain;f=doc%2Fbugs%2Fsome_but_not_all_meta_fields_are_stored_escaped.mdwn;h=587771ba4c274c685b79c36fc7582bbffefc839d;hb=45bd60365252954c31e688ce8207045730744e00;hp=8e1ca42e04432e4d32282e344c6dca9a3afb9c3a;hpb=bab8fec52468b780485bdf96a37a593bd033c7e3;p=ikiwiki.git diff --git a/doc/bugs/some_but_not_all_meta_fields_are_stored_escaped.mdwn b/doc/bugs/some_but_not_all_meta_fields_are_stored_escaped.mdwn index 8e1ca42e0..587771ba4 100644 --- a/doc/bugs/some_but_not_all_meta_fields_are_stored_escaped.mdwn +++ b/doc/bugs/some_but_not_all_meta_fields_are_stored_escaped.mdwn @@ -20,6 +20,9 @@ Points of extra subtlety: that that's what Xapian wants anyway (which is why I didn't change it), but I could be wrong... + > AFAICS, this if anything, fixes a bug, xapian definitely expects + > unescaped text here. --[[Joey]] + * Page descriptions in the HTML `` were previously double-escaped: the description was stored escaped with numeric entities, then that was output with a second layer of escaping! In this branch, I just emit @@ -37,3 +40,5 @@ Points of extra subtlety: contained markup could appear unescaped on any page that inlines them in `quick=yes` mode, and is rebuilt for some other reason. The failure mode here would be too little escaping, i.e. cross-site scripting. + +[[!tag done]]