因此,如果你将他们作为URL的一部分,并且没有进行转义处理,将会存在一定的风险。
What it really means is you should always escape these characters if a part of your URL (i. e. like a query param) is likely to contain them.
如果一个URL的某一部分(如查询参数的一部分)可能包含这些字符之一,则应该在放入URL之前对其进行转义处理。
If a part of a URL (such as a query parameter), is likely to contain one of these characters, it should be escaped before being included in the URL.
如果使用处理管道,那么关键就是建立管道输入和输出的契约,无论数据是否转义。
If you're using processing pipelines, then the key is in establishing contracts for pipeline inputs and outputs as to whether the data is escaped.
如果您需要处理一些略有变化的数据,或者包含难以进行转义的特殊字符的数据,那么使用这个符号是非常方便的。
This is really handy if you're dealing with data that varies slightly, or data that has special characters that would be awkward to escape.
它确实能够正确地将特殊字符转义作为文本中的实体处理,但除此之外,则需要调用程序正确使用该接口。
It does properly handle escaping special characters as entities in text, but other than that it's up to the calling program to use the interface properly.
客户机不需要制定编码或者转义,服务器上也不需要特殊处理(除了标准XML解析以外)。
No additional encoding or escaping is required on the client, and no additional processing (beyond the standard XML parsing) is required on the server.
不过,我将忽略正确的转义、处理指令和其他少数几个方面。
However, I'll skip handling proper escaping, processing instructions, and a few other aspects.
这个转义序列告诉Vim把替换文本作为一个Vimscript表达式来处理,对它进行评估来获取实际的替换字符串。
This escape sequence tells Vim to treat the replacement text as a Vimscript expression, evaluating it to get the actual replacement string.
这可以减少处理转义字符的工作。
属性告诉处理器不要将文本内容转义。
The attribute tells the processor not to escape the content of the text.
当我们不想要任何处理时,应使用转义标记。
The escape mark-up is used when we don't want to do any processing.
对于不被公认的转义XML的后处理中的缺陷修正。
Post-processor bug fix for escaped XML code that it does not recognize.
待求值的变量被当作模板来处理。它们遵循模板的转义方式和安全特性。
Evaluated variables are treated the same as templates. They follow the same escapement and security features just as if they were templates.
待求值的变量被当作模板来处理。它们遵循模板的转义方式和安全特性。
Evaluated variables are treated the same as templates. They follow the same escapement and security features just as if they were templates.
应用推荐