Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:71981
Return-Path: <pajousek@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 49655 invoked from network); 2 Feb 2014 09:38:27 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 2 Feb 2014 09:38:27 -0000
Authentication-Results: pb1.pair.com smtp.mail=pajousek@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=pajousek@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.48 as permitted sender)
X-PHP-List-Original-Sender: pajousek@gmail.com
X-Host-Fingerprint: 209.85.216.48 mail-qa0-f48.google.com  
Received: from [209.85.216.48] ([209.85.216.48:52520] helo=mail-qa0-f48.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id C0/25-30967-1121EE25 for <internals@lists.php.net>; Sun, 02 Feb 2014 04:38:26 -0500
Received: by mail-qa0-f48.google.com with SMTP id f11so8510003qae.7
        for <internals@lists.php.net>; Sun, 02 Feb 2014 01:38:22 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        bh=V2UcyJUimbd+IP2ZMp7jJq5u9DHd8tyagzbchEhSlH4=;
        b=L9AQg63bolWWLbH3ONbpOstxuxKGxwDLctTRhlZVfNqldRF9QsRvg3FQ0/hhfcKPzQ
         qbLQOwUV1XCgr1vm0JBl5c0yBSPBhyXXfV8zPhuQbQSDF9zFuv5DIM6klP/0MUin+D2C
         vexE8E8YegA0Jl10SoqdS4QqUXw6SoBxn4doOeJo8A0SjNxgxS3c2TyJZ4x9dizdJ06+
         KdVVuXaePdgSgMjuizbhOsFrdYjg6aACoEZY5vdwcTvbj0ZfHjab3W2v1zTpEtyJPzwD
         JvnOHu9Z0hmd2okxUpIOuLpNdr+6k59jLeXskM4gjKjspw6T4eTw0RsDzmHWzKXsm9Y0
         FS1g==
MIME-Version: 1.0
X-Received: by 10.140.21.179 with SMTP id 48mr43673318qgl.78.1391333902888;
 Sun, 02 Feb 2014 01:38:22 -0800 (PST)
Received: by 10.96.86.134 with HTTP; Sun, 2 Feb 2014 01:38:22 -0800 (PST)
In-Reply-To: <CAGa2bXYVV8sjK2EWGgYdDBONCPUzh4wR_mUKFAm7f+RyvAFT7Q@mail.gmail.com>
References: <CAGa2bXbFk3+ScywpkeGcFUcmVvxLRHeWrdObvOshx6NjuB2YHw@mail.gmail.com>
	<CAESVnVrJN=WE85zcyvyfBFCJhuQ1FPYBs+Tt25fcYY+pQMGy1g@mail.gmail.com>
	<CAGa2bXYVV8sjK2EWGgYdDBONCPUzh4wR_mUKFAm7f+RyvAFT7Q@mail.gmail.com>
Date: Sun, 2 Feb 2014 10:38:22 +0100
Message-ID: <CAB6YZuxVLy0zk12ipwptF7Vnw-fr7kPnSY+hqNKiE96DsDzvhQ@mail.gmail.com>
To: Yasuo Ohgaki <yohgaki@ohgaki.net>
Cc: Sara Golemon <pollita@php.net>, "internals@lists.php.net" <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Re: [PHP-DEV] [RFC] Improve HTML escape
From: pajousek@gmail.com (=?UTF-8?Q?Pavel_Kou=C5=99il?=)

On Sun, Feb 2, 2014 at 4:31 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> The code is broken in first place since attribute must be enclosed by
> "(HTML5/XHTML) or '(HTML4), but many (if not most) browsers just allows
> attributes without qoutes.

Well, the HTML5 specification says attribute values can be left
unquoted, so I'd say that the "code is broken" statement is invalid.
http://www.w3.org/TR/html-markup/syntax.html#syntax-attr-unquoted