flashvars values are not automatically escaped

[GoogleCodeExporter]

When setting values in a flashvars object to be passed to SWFObject 2.1,
the = and & characters (among others) are not being escaped before
generating the output.  This is really counter-intuitive, as half the
reason one would want to use SWFObject is to avoid having to manually
convert and escape stuff.

I'm not sure what SWFObject can do, as changing this behaviour would break
backwards compatibility... possibly a second version of embedSWF that just
escapes the values of the flashvars object and then passes the parameters
in to the original embedSWF?

Original issue reported on code.google.com by Sean.Mid...@gmail.com on 13 Oct 2008 at 4:35

• Merged into: #66

[GoogleCodeExporter]

For dynamic publishing you can use the flashvars javascript object to pass 
single
name-value pairs at a time. We leave it up to web authors to encode the 
individual
names and values when they are in need of special characters. 

Because this is in line with HTML (static) publishing we do not plan to offer 
any
additional functionality.

Original comment by bobbyvandersluis on 14 Oct 2008 at 9:34

• Changed state: Invalid

[GoogleCodeExporter]

Merging into issue 66

Original comment by platelu...@gmail.com on 14 Jan 2010 at 11:50

• Changed state: Duplicate