search

stepmania / stepmania-site

StepMania's Website, forums, etc.
https://www.stepmania.com/
19 stars 7 forks source link

There is no need for double encode, but single quotes should be encoded. #29

Closed SoonDead closed 10 years ago

SoonDead commented 10 years ago

htmlentities() encodes everything htmlspecialchars() does, but more.

The double encode would make all signs that are special html chars > < " & unreadable, but does not provide anything securitywise.

shakesoda commented 10 years ago

I really should write up smoke tests for this thing.