[development] Video module getting ready for 4.7 release: need help debugging

Khalid B kb at 2bits.com
Mon Jun 19 04:05:22 UTC 2006


On 6/18/06, Steven Wittens <steven at acko.net> wrote:
> >
> > Or did I miss something?
> >
>
> Yes. As Fabio said, the result of this t() call is used for the
> *title attribute of a link*. I imagine the surrounding code is
> something like l(.... , array('title' => t('play %link', array('%
> link' => $node->title)))).
>
> Title attributes (or any HTML attribute for that matter) can not
> contain mark-up. So, there is no reason to require individual
> attributes to be escaped by the caller. We escape all attribute
> contents in drupal_attributes(), which is what l() uses.
>
> As always, output context is everything.

I was commenting on the general issue, and not Fabio's specific
case. You are right that that latter case is moot, since we get it
for free by virtue of the l().

What about the rest of the list that Dries posted?


More information about the development mailing list