Re: [VE][404] Improper detection of quoted '<' symbol

On Mon, 28 Jan 2008 13:52:14 -0000
"Francisco Fernandes" <francisco_jorge@netcabo.pt> wrote:

> 
> %0D%0AValidating http://www.yeastract.com/%0D%0AError [404]:

That URL returns a 404 (Not Found) error.

> "character X is the first character of a delimiter but occurred as
> data"%0D%0A
> 
>   Line 104, Column 18: character "<" is the first character of a
> delimiter but occurred as data.
> 		document.write('<' + 'a ' + 'href=\"mailto:' +
> username + '@' + server1  

Insufficient context to tell what's wrong.  It could, for example,
arise from confusing HTML and XHTML syntax: in the former, the
contents of <script> are CDATA.

> It should detect that the character "<" is inside quotes and so it is
> not an error.

Whether it's an error or not depends on context, but not the quotes.

-- 
Nick Kew

Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/

Received on Monday, 28 January 2008 20:57:20 UTC