Defang tests
To make sure Defang is enabled, the following should be a block of red text instead of an image:
Defang interferes with markup in various ways1.
One interference is with decoding the hex sequences for certain special characters in URLs:
this link should contain
%26, not&company people hate.this link should contain
%40, not@: dandv's Perl bugs; incidentally, '@' is passed through the GET parameter?instead of%3Fin anchors:
Perl's learning curve is "shallow (easy to learn)" and long.
Another interference is that Defang actually destroys certain types of links:
In the following example,
(2008is removed from the URL: California Proposition 8in this example, the characters
B588following a{are lost: link (by chance, the link lands correctly thanks to the remote site ignoring the GUID)%\d\dsequences are not read as%followed by two hex digits, but as%followed by 2 or more hex digits (or other characters even). This leads to corrupt Unicode characters:- %20 (incidentally, the link still works)
- percent 3 or more digits (breaks the link)
- single %2BA
YouTube links, once expanded (i.e. not in preview mode) are defanged too: embed src becomes `embed defang_src:
http://www.youtube.com/watch?v=zmm56R0Nqis
for example, it defangs the id attribute of footnotes (their
aandlielements). ↩
Showing changes from previous revision. Removed | Added
