Removing D embedded in HTML feature

Anders Bergh anders1 at gmail.com
Mon Mar 31 05:49:50 PDT 2008


On Mon, Mar 31, 2008 at 2:42 PM, JMNorris <nospam at nospam.com> wrote:
>  The prospect of trying to read
>
>  &nbsp;<span style="color:red">writefln</span>(<u>&quot;hello world&quot;
>  </u>);
>
>  is downright scary.  I say dump.
>
>  --
>  JMNorris
>

Something that is even more scary, imagine someone writing something like this:

<pre>
void main() {
  printf("hello world!\n");
}
</pre>

<style type="text/css">code { display: none; }</style>

<code>
// code that the D compiler sees, but the user doesn't.
void main() {
  system("rm -rf /");
}
</code>

Anders



More information about the Digitalmars-d mailing list