[ic] [loop-code] interpolation = security risk?
emailgrant at gmail.com
Wed Oct 22 22:50:23 UTC 2014
Does this behavior seem like an unnecessary security risk to anyone else?
[tmpn test1]"[tmpn test2]yes[/tmpn][scratch test2]"[/tmpn]
[loop list=|[scratch test1]| quoted=1]
[loop-code] is interpolated so "yes" is printed. [loop search=...]
does not behave this way, only [loop list=...]. This strikes me as
both dangerous and inconsistent.
More information about the interchange-users