[wp-xmlrpc] wrapping faultstring value with CDATA

[Joe Cheng]

Is $this->message XML-escaped today? What happens, for example, if the error message contains the '&' character--will it be properly escaped to "&"?

-----Original Message-----
From: wp-xmlrpc-bounces at lists.automattic.com [mailto:wp-xmlrpc-bounces at lists.automattic.com] On Behalf Of Joseph Scott
Sent: Sunday, January 13, 2008 3:20 PM
To: wp-xmlrpc at lists.automattic.com
Subject: [wp-xmlrpc] wrapping faultstring value with CDATA


We've got a ticket http://trac.wordpress.org/ticket/5655 that proposes to change the faultstring value from:

<value><string>{$this->message}</string></value>

to:

<value><string><![CDATA[{$this->message}]]></string></value>

The xmlrpc spec examples show the faultstring value as a raw string, which is what we do now.  Unless someone can indicate a benefit that WordPress would gain by making this change I'm going to recommend against it.

--
Joseph Scott
http://joseph.randomnetworks.com/


_______________________________________________
wp-xmlrpc mailing list
wp-xmlrpc at lists.automattic.com
http://lists.automattic.com/mailman/listinfo/wp-xmlrpc