HI
On the other hand we need to consider what the TEXT attribute was meant for.
Assume you have a T-Shirt shop where the customer can define the text that appears on the T-Shirt
Using PRODUCT_NAME_DEEP_REGEX means the while the customer could order a t-shirt with
<script>Some Message</script>
using
PRODUCT_NAME_DEEP_REGEX as a sanitizer , would mean edit_orders would reject that,
So maybe PRODUCT_DESC_REGEX is a better option



Reply With Quote
