From zwwiuyt at memory4less.com  Thu Apr 11 15:48:12 2013
From: zwwiuyt at memory4less.com (Douglas Frost)
Date: Thu, 11 Apr 2013 18:48:12 +0300
Subject: Your lady will notice that certainly
Message-ID: <002a01ce36c4$b706f720$4766c624@xqiyyu4ll4pzp3uq7>

http://jetlinenews.co.uk/temperature.html Advance your male power



From stassats at gmail.com  Tue Apr 30 18:47:53 2013
From: stassats at gmail.com (Stas Boukarev)
Date: Tue, 30 Apr 2013 22:47:53 +0400
Subject: Bug report: ESC applied to attribute values produces spurious output
In-Reply-To: <EBA77C23-3018-49FF-9B6C-ABEC3DFAC630@flownet.com> (Ron Garret's
	message of "Tue, 30 Apr 2013 11:39:43 -0700")
References: <EBA77C23-3018-49FF-9B6C-ABEC3DFAC630@flownet.com>
Message-ID: <87r4hr26ue.fsf@gmail.com>

Ron Garret <ron at flownet.com> writes:

> ? (with-html-output-to-string (s) ((:a :href (esc "XXX")) (esc "YYY")))
> "<aXXX href='XXX'>YYY</a>"
>
> My actual use case is:
>
> (:a :onclick (esc "f('str')"))
>
> This is CL-WHO 1.1.1 acquired through quicklisp.
That's not a bug, the attributes don't need STR or ESC.
(with-html-output-to-string (s) ((:a :href (escape-string "XXX")) (esc "YYY")))

-- 
With best regards, Stas.


From sdt at sebyte.me  Tue Apr 30 20:55:53 2013
From: sdt at sebyte.me (Sebastian Tennant)
Date: Tue, 30 Apr 2013 20:55:53 +0000
Subject: Bug report: ESC applied to attribute values produces spurious output
In-Reply-To: <2024ED78-6F4A-4A6F-9B10-B78E953CABD9@flownet.com> (Ron Garret's
	message of "Tue, 30 Apr 2013 12:02:36 -0700")
References: <EBA77C23-3018-49FF-9B6C-ABEC3DFAC630@flownet.com>
	<87r4hr26ue.fsf@gmail.com>
	<2024ED78-6F4A-4A6F-9B10-B78E953CABD9@flownet.com>
Message-ID: <hainsppi.fsf@chimera.gnukahvesi.net>

Quoth Ron Garret <ron at flownet.com>:
> On Apr 30, 2013, at 11:47 AM, Stas Boukarev wrote:
>
>> Ron Garret <ron at flownet.com> writes:
>> 
>>> ? (with-html-output-to-string (s) ((:a :href (esc "XXX")) (esc "YYY")))
>>> "<aXXX href='XXX'>YYY</a>"
>>> 
>>> My actual use case is:
>>> 
>>> (:a :onclick (esc "f('str')"))
>>> 
>>> This is CL-WHO 1.1.1 acquired through quicklisp.
>> That's not a bug, the attributes don't need STR or ESC.
>> (with-html-output-to-string (s) ((:a :href (escape-string "XXX")) (esc "YYY")))
>
>
> Well, they need something if you want to embed a single-quoted string inside them:
>
> ? (with-html-output-to-string (s) ((:input :type :button :onclick "alert('foo')")))
> "<input type='BUTTON' onclick='alert('foo')' />"

You have a choice.  You can either stick with single quotes around foo and
change *attribute-quote-char* to double quotes, or leave *attribute-quote-char*
as it is and use double quotes around foo.


From turnau at wemba.edu.pl  Tue Apr 30 19:51:43 2013
From: turnau at wemba.edu.pl (turnau at wemba.edu.pl)
Date: Tue, 30 Apr 2013 21:51:43 +0200
Subject: Bug report: ESC applied to attribute values produces spurious output
In-Reply-To: <25B8030E-D802-4F19-82CD-B631E942BE7E@flownet.com> (Ron Garret's
	message of "Tue, 30 Apr 2013 12:46:46 -0700")
References: <EBA77C23-3018-49FF-9B6C-ABEC3DFAC630@flownet.com>
	<87r4hr26ue.fsf@gmail.com>
	<2024ED78-6F4A-4A6F-9B10-B78E953CABD9@flownet.com>
	<518017D8.7030401@jensteich.de>
	<6A613468-A0B5-48E3-BFE4-A6BAB4C0D784@flownet.com>
	<51801C9E.3080702@jensteich.de>
	<25B8030E-D802-4F19-82CD-B631E942BE7E@flownet.com>
Message-ID: <87ehdriypc.fsf@mefisto.localdomain>

> On Apr 30, 2013, at 12:33 PM, Jens Teich wrote:
>
>> Am 30.04.2013 21:19, schrieb Ron Garret:
>>> On Apr 30, 2013, at 12:13 PM, Jens Teich wrote:
>>> 
>>>> Am 30.04.13 21:02, schrieb Ron Garret:
>>>>> On Apr 30, 2013, at 11:47 AM, Stas Boukarev wrote:
>>>>> 
>>>>>> Ron Garret <ron at flownet.com> writes:
>>>>>> 
>>>>>>> ? (with-html-output-to-string (s) ((:a :href (esc "XXX")) (esc "YYY")))
>>>>>>> "<aXXX href='XXX'>YYY</a>"
>>>>>>> 
>>>>>>> My actual use case is:
>>>>>>> 
>>>>>>> (:a :onclick (esc "f('str')"))
>>>>>>> 
>>>>>>> This is CL-WHO 1.1.1 acquired through quicklisp.
>>>>>> That's not a bug, the attributes don't need STR or ESC.
>>>>>> (with-html-output-to-string (s) ((:a :href (escape-string "XXX")) (esc "YYY")))
>>>>> 
>>>>> Well, they need something if you want to embed a single-quoted string inside them:
>>>>> 
>>>>> ? (with-html-output-to-string (s) ((:input :type :button :onclick "alert('foo')")))
>>>>> "<input type='BUTTON' onclick='alert('foo')' />"
>>>> You need parenscript
>>>> 
>>>> :onclick (ps (alert ...))
>>> No, that won't help.  PS just produces the same troublesome string:
>>> 
>>> ? (parenscript::ps (alert "foo"))
>>> "alert('foo');"
>>> ? (with-html-output-to-string (s) ((:input :type :button :onclick (parenscript::ps (alert "foo")))))
>>> "<input type='BUTTON' onclick='alert('foo');' />"
>>> 
>>> 
>>> 
>> (setq ps:*js-string-delimiter* #\" )
>
> Ooh!  So close!  Turns out this exposes a bug in parenscript:
>
> ? (setq ps:*js-string-delimiter* #\" )
> #\"
> ? (princ (ps:ps (alert "'\"")))
> alert("\'"");
> "alert(\"\\'\"\");"
>
> But I guess this is close enough for my current needs.  Thanks!
>
> rg

How about this:

(setq cl-who:*attribute-quote-char* #\")

(cl-who:with-html-output-to-string (s) ((:input :type :button :onclick "alert('foo')")))
"<input type=\"BUTTON\" onclick=\"alert('foo')\" />"

PT



From info at jensteich.de  Tue Apr 30 19:13:28 2013
From: info at jensteich.de (Jens Teich)
Date: Tue, 30 Apr 2013 21:13:28 +0200
Subject: Bug report: ESC applied to attribute values produces spurious
 output
In-Reply-To: <2024ED78-6F4A-4A6F-9B10-B78E953CABD9@flownet.com>
References: <EBA77C23-3018-49FF-9B6C-ABEC3DFAC630@flownet.com> <87r4hr26ue.fsf@gmail.com> <2024ED78-6F4A-4A6F-9B10-B78E953CABD9@flownet.com>
Message-ID: <518017D8.7030401@jensteich.de>

Am 30.04.13 21:02, schrieb Ron Garret:
>
> On Apr 30, 2013, at 11:47 AM, Stas Boukarev wrote:
>
>> Ron Garret <ron at flownet.com> writes:
>>
>>> ? (with-html-output-to-string (s) ((:a :href (esc "XXX")) (esc "YYY")))
>>> "<aXXX href='XXX'>YYY</a>"
>>>
>>> My actual use case is:
>>>
>>> (:a :onclick (esc "f('str')"))
>>>
>>> This is CL-WHO 1.1.1 acquired through quicklisp.
>> That's not a bug, the attributes don't need STR or ESC.
>> (with-html-output-to-string (s) ((:a :href (escape-string "XXX")) (esc "YYY")))
>
>
> Well, they need something if you want to embed a single-quoted string inside them:
>
> ? (with-html-output-to-string (s) ((:input :type :button :onclick "alert('foo')")))
> "<input type='BUTTON' onclick='alert('foo')' />"

You need parenscript

:onclick (ps (alert ...))

~jens



From ron at flownet.com  Tue Apr 30 19:46:46 2013
From: ron at flownet.com (Ron Garret)
Date: Tue, 30 Apr 2013 12:46:46 -0700
Subject: Bug report: ESC applied to attribute values produces spurious output
In-Reply-To: <51801C9E.3080702@jensteich.de>
References: <EBA77C23-3018-49FF-9B6C-ABEC3DFAC630@flownet.com> <87r4hr26ue.fsf@gmail.com> <2024ED78-6F4A-4A6F-9B10-B78E953CABD9@flownet.com> <518017D8.7030401@jensteich.de> <6A613468-A0B5-48E3-BFE4-A6BAB4C0D784@flownet.com> <51801C9E.3080702@jensteich.de>
Message-ID: <25B8030E-D802-4F19-82CD-B631E942BE7E@flownet.com>


On Apr 30, 2013, at 12:33 PM, Jens Teich wrote:

> Am 30.04.2013 21:19, schrieb Ron Garret:
>> On Apr 30, 2013, at 12:13 PM, Jens Teich wrote:
>> 
>>> Am 30.04.13 21:02, schrieb Ron Garret:
>>>> On Apr 30, 2013, at 11:47 AM, Stas Boukarev wrote:
>>>> 
>>>>> Ron Garret <ron at flownet.com> writes:
>>>>> 
>>>>>> ? (with-html-output-to-string (s) ((:a :href (esc "XXX")) (esc "YYY")))
>>>>>> "<aXXX href='XXX'>YYY</a>"
>>>>>> 
>>>>>> My actual use case is:
>>>>>> 
>>>>>> (:a :onclick (esc "f('str')"))
>>>>>> 
>>>>>> This is CL-WHO 1.1.1 acquired through quicklisp.
>>>>> That's not a bug, the attributes don't need STR or ESC.
>>>>> (with-html-output-to-string (s) ((:a :href (escape-string "XXX")) (esc "YYY")))
>>>> 
>>>> Well, they need something if you want to embed a single-quoted string inside them:
>>>> 
>>>> ? (with-html-output-to-string (s) ((:input :type :button :onclick "alert('foo')")))
>>>> "<input type='BUTTON' onclick='alert('foo')' />"
>>> You need parenscript
>>> 
>>> :onclick (ps (alert ...))
>> No, that won't help.  PS just produces the same troublesome string:
>> 
>> ? (parenscript::ps (alert "foo"))
>> "alert('foo');"
>> ? (with-html-output-to-string (s) ((:input :type :button :onclick (parenscript::ps (alert "foo")))))
>> "<input type='BUTTON' onclick='alert('foo');' />"
>> 
>> 
>> 
> (setq ps:*js-string-delimiter* #\" )

Ooh!  So close!  Turns out this exposes a bug in parenscript:

? (setq ps:*js-string-delimiter* #\" )
#\"
? (princ (ps:ps (alert "'\"")))
alert("\'"");
"alert(\"\\'\"\");"

But I guess this is close enough for my current needs.  Thanks!

rg




From info at jensteich.de  Tue Apr 30 19:33:50 2013
From: info at jensteich.de (Jens Teich)
Date: Tue, 30 Apr 2013 21:33:50 +0200
Subject: Bug report: ESC applied to attribute values produces spurious
 output
In-Reply-To: <6A613468-A0B5-48E3-BFE4-A6BAB4C0D784@flownet.com>
References: <EBA77C23-3018-49FF-9B6C-ABEC3DFAC630@flownet.com> <87r4hr26ue.fsf@gmail.com> <2024ED78-6F4A-4A6F-9B10-B78E953CABD9@flownet.com> <518017D8.7030401@jensteich.de> <6A613468-A0B5-48E3-BFE4-A6BAB4C0D784@flownet.com>
Message-ID: <51801C9E.3080702@jensteich.de>

Am 30.04.2013 21:19, schrieb Ron Garret:
> On Apr 30, 2013, at 12:13 PM, Jens Teich wrote:
>
>> Am 30.04.13 21:02, schrieb Ron Garret:
>>> On Apr 30, 2013, at 11:47 AM, Stas Boukarev wrote:
>>>
>>>> Ron Garret <ron at flownet.com> writes:
>>>>
>>>>> ? (with-html-output-to-string (s) ((:a :href (esc "XXX")) (esc "YYY")))
>>>>> "<aXXX href='XXX'>YYY</a>"
>>>>>
>>>>> My actual use case is:
>>>>>
>>>>> (:a :onclick (esc "f('str')"))
>>>>>
>>>>> This is CL-WHO 1.1.1 acquired through quicklisp.
>>>> That's not a bug, the attributes don't need STR or ESC.
>>>> (with-html-output-to-string (s) ((:a :href (escape-string "XXX")) (esc "YYY")))
>>>
>>> Well, they need something if you want to embed a single-quoted string inside them:
>>>
>>> ? (with-html-output-to-string (s) ((:input :type :button :onclick "alert('foo')")))
>>> "<input type='BUTTON' onclick='alert('foo')' />"
>> You need parenscript
>>
>> :onclick (ps (alert ...))
> No, that won't help.  PS just produces the same troublesome string:
>
> ? (parenscript::ps (alert "foo"))
> "alert('foo');"
> ? (with-html-output-to-string (s) ((:input :type :button :onclick (parenscript::ps (alert "foo")))))
> "<input type='BUTTON' onclick='alert('foo');' />"
>
>
>
(setq ps:*js-string-delimiter* #\" )


From ron at flownet.com  Tue Apr 30 18:39:43 2013
From: ron at flownet.com (Ron Garret)
Date: Tue, 30 Apr 2013 11:39:43 -0700
Subject: Bug report: ESC applied to attribute values produces spurious output
Message-ID: <EBA77C23-3018-49FF-9B6C-ABEC3DFAC630@flownet.com>


? (with-html-output-to-string (s) ((:a :href (esc "XXX")) (esc "YYY")))
"<aXXX href='XXX'>YYY</a>"

My actual use case is:

(:a :onclick (esc "f('str')"))

This is CL-WHO 1.1.1 acquired through quicklisp.

rg



From ron at flownet.com  Tue Apr 30 19:19:25 2013
From: ron at flownet.com (Ron Garret)
Date: Tue, 30 Apr 2013 12:19:25 -0700
Subject: Bug report: ESC applied to attribute values produces spurious output
In-Reply-To: <518017D8.7030401@jensteich.de>
References: <EBA77C23-3018-49FF-9B6C-ABEC3DFAC630@flownet.com> <87r4hr26ue.fsf@gmail.com> <2024ED78-6F4A-4A6F-9B10-B78E953CABD9@flownet.com> <518017D8.7030401@jensteich.de>
Message-ID: <6A613468-A0B5-48E3-BFE4-A6BAB4C0D784@flownet.com>


On Apr 30, 2013, at 12:13 PM, Jens Teich wrote:

> Am 30.04.13 21:02, schrieb Ron Garret:
>> 
>> On Apr 30, 2013, at 11:47 AM, Stas Boukarev wrote:
>> 
>>> Ron Garret <ron at flownet.com> writes:
>>> 
>>>> ? (with-html-output-to-string (s) ((:a :href (esc "XXX")) (esc "YYY")))
>>>> "<aXXX href='XXX'>YYY</a>"
>>>> 
>>>> My actual use case is:
>>>> 
>>>> (:a :onclick (esc "f('str')"))
>>>> 
>>>> This is CL-WHO 1.1.1 acquired through quicklisp.
>>> That's not a bug, the attributes don't need STR or ESC.
>>> (with-html-output-to-string (s) ((:a :href (escape-string "XXX")) (esc "YYY")))
>> 
>> 
>> Well, they need something if you want to embed a single-quoted string inside them:
>> 
>> ? (with-html-output-to-string (s) ((:input :type :button :onclick "alert('foo')")))
>> "<input type='BUTTON' onclick='alert('foo')' />"
> 
> You need parenscript
> 
> :onclick (ps (alert ...))

No, that won't help.  PS just produces the same troublesome string:

? (parenscript::ps (alert "foo"))
"alert('foo');"
? (with-html-output-to-string (s) ((:input :type :button :onclick (parenscript::ps (alert "foo")))))
"<input type='BUTTON' onclick='alert('foo');' />"



From ron at flownet.com  Tue Apr 30 19:02:36 2013
From: ron at flownet.com (Ron Garret)
Date: Tue, 30 Apr 2013 12:02:36 -0700
Subject: Bug report: ESC applied to attribute values produces spurious output
In-Reply-To: <87r4hr26ue.fsf@gmail.com>
References: <EBA77C23-3018-49FF-9B6C-ABEC3DFAC630@flownet.com> <87r4hr26ue.fsf@gmail.com>
Message-ID: <2024ED78-6F4A-4A6F-9B10-B78E953CABD9@flownet.com>


On Apr 30, 2013, at 11:47 AM, Stas Boukarev wrote:

> Ron Garret <ron at flownet.com> writes:
> 
>> ? (with-html-output-to-string (s) ((:a :href (esc "XXX")) (esc "YYY")))
>> "<aXXX href='XXX'>YYY</a>"
>> 
>> My actual use case is:
>> 
>> (:a :onclick (esc "f('str')"))
>> 
>> This is CL-WHO 1.1.1 acquired through quicklisp.
> That's not a bug, the attributes don't need STR or ESC.
> (with-html-output-to-string (s) ((:a :href (escape-string "XXX")) (esc "YYY")))


Well, they need something if you want to embed a single-quoted string inside them:

? (with-html-output-to-string (s) ((:input :type :button :onclick "alert('foo')")))
"<input type='BUTTON' onclick='alert('foo')' />"

rg