Skip to content

Commit 0a8f595

Browse files
committed
Clarify use of HTML markup per request by @TallTed.
1 parent 0685d59 commit 0a8f595

File tree

1 file changed

+7
-6
lines changed

1 file changed

+7
-6
lines changed

index.html

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4903,12 +4903,13 @@ <h3>Complex Language Markup</h3>
49034903
</p>
49044904

49054905
<p>
4906-
Implementers are strongly discouraged from encoding information as HTML
4907-
because doing so 1) requires some version of an HTML processor, which
4908-
increases the burden of processing language and/or base direction information,
4909-
and 2) increases the security attack surface when utilizing this data model
4910-
as blindly processing HTML could result in executing a <code>script</code>
4911-
tag that an attacker injected at some point during the data production process.
4906+
Despite that possibility, implementers are strongly discouraged from encoding
4907+
information as HTML because doing so 1) requires some version of an HTML
4908+
processor, which increases the burden of processing language and/or base
4909+
direction information, and 2) increases the security attack surface when
4910+
utilizing this data model as blindly processing HTML could result in executing
4911+
a <code>script</code> tag that an attacker injected at some point during the
4912+
data production process.
49124913
</p>
49134914

49144915
<p>

0 commit comments

Comments
 (0)