HI

On the other hand we need to consider what the TEXT attribute was meant for.

Assume you have a T-Shirt shop where the customer can define the text that appears on the T-Shirt

Using PRODUCT_NAME_DEEP_REGEX means the while the customer could order a t-shirt with
<script>Some Message</script>
using
PRODUCT_NAME_DEEP_REGEX as a sanitizer , would mean edit_orders would reject that,

So maybe PRODUCT_DESC_REGEX is a better option
Quote Originally Posted by wilt View Post
Hi

That does in fact seem like a cool solution, although Chris and I think PRODUCT_NAME_DEEP_REGEX is better than PRODUCT_DESC_REGEX as it is less permissive.