<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Chrome &#8211; are you sanitising my inputs without my permission?</title>
	<atom:link href="http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/feed/" rel="self" type="application/rss+xml" />
	<link>http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/</link>
	<description>Throwaway thoughts from a .net developer</description>
	<lastBuildDate>Wed, 09 May 2012 07:23:58 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
	<item>
		<title>By: Rich</title>
		<link>http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/comment-page-1/#comment-280</link>
		<dc:creator>Rich</dc:creator>
		<pubDate>Thu, 05 Aug 2010 12:44:03 +0000</pubDate>
		<guid isPermaLink="false">http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/#comment-280</guid>
		<description>I&#039;ve got *exactly* the same problem with the DataCash post. Darn Chrome! Grrrr....</description>
		<content:encoded><![CDATA[<p>I&#8217;ve got *exactly* the same problem with the DataCash post. Darn Chrome! Grrrr&#8230;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Reevesy</title>
		<link>http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/comment-page-1/#comment-278</link>
		<dc:creator>Reevesy</dc:creator>
		<pubDate>Tue, 27 Jul 2010 11:14:44 +0000</pubDate>
		<guid isPermaLink="false">http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/#comment-278</guid>
		<description>Hi

I blogged about this a while back here 

http://www.jsfblog.info/2010/03/3d-secure-and-the-pareq-field-in-google-chrome-safari-browsers/

The textarea seems to be working a treat for us as we been in production with it for a few months.</description>
		<content:encoded><![CDATA[<p>Hi</p>
<p>I blogged about this a while back here </p>
<p><a href="http://www.jsfblog.info/2010/03/3d-secure-and-the-pareq-field-in-google-chrome-safari-browsers/" rel="nofollow">http://www.jsfblog.info/2010/03/3d-secure-and-the-pareq-field-in-google-chrome-safari-browsers/</a></p>
<p>The textarea seems to be working a treat for us as we been in production with it for a few months.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: admin</title>
		<link>http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/comment-page-1/#comment-275</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Wed, 14 Jul 2010 15:47:01 +0000</pubDate>
		<guid isPermaLink="false">http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/#comment-275</guid>
		<description>unbelievable eh!  Sack the juggler that let that one through the door from UAT!</description>
		<content:encoded><![CDATA[<p>unbelievable eh!  Sack the juggler that let that one through the door from UAT!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Duncan Smart</title>
		<link>http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/comment-page-1/#comment-274</link>
		<dc:creator>Duncan Smart</dc:creator>
		<pubDate>Wed, 14 Jul 2010 15:17:18 +0000</pubDate>
		<guid isPermaLink="false">http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/#comment-274</guid>
		<description>Did a quick test, and it looks like yes Chrome is trimming trailing CRLFs! You can add them with JavaScript and it maintains them (e.g. &quot;if PaReq field doesn&#039;t end with &#039;\r\n&#039; then append &#039;\r\n&#039;&quot;)</description>
		<content:encoded><![CDATA[<p>Did a quick test, and it looks like yes Chrome is trimming trailing CRLFs! You can add them with JavaScript and it maintains them (e.g. &#8220;if PaReq field doesn&#8217;t end with &#8216;\r\n&#8217; then append &#8216;\r\n&#8217;&#8221;)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Duncan Smart</title>
		<link>http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/comment-page-1/#comment-273</link>
		<dc:creator>Duncan Smart</dc:creator>
		<pubDate>Wed, 14 Jul 2010 13:28:04 +0000</pubDate>
		<guid isPermaLink="false">http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/#comment-273</guid>
		<description>View source can&#039;t be relied upon, as FF and Chrome show you what the parsed DOM thinks it has - not necessarily the actual text that was sent. Of course this may be the crux of your problem: that these CRLFs are being &quot;normalised&quot; out of the form field. In any case use Fiddler to see what&#039;s really going back and forth: espcecially in the POST to the 3rd party service.</description>
		<content:encoded><![CDATA[<p>View source can&#8217;t be relied upon, as FF and Chrome show you what the parsed DOM thinks it has &#8211; not necessarily the actual text that was sent. Of course this may be the crux of your problem: that these CRLFs are being &#8220;normalised&#8221; out of the form field. In any case use Fiddler to see what&#8217;s really going back and forth: espcecially in the POST to the 3rd party service.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tweets that mention Chrome – are you sanitising my inputs without my permission? -- Topsy.com</title>
		<link>http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/comment-page-1/#comment-272</link>
		<dc:creator>Tweets that mention Chrome – are you sanitising my inputs without my permission? -- Topsy.com</dc:creator>
		<pubDate>Wed, 14 Jul 2010 12:45:06 +0000</pubDate>
		<guid isPermaLink="false">http://idisposable.co.uk/2010/07/chrome-are-you-sanitising-my-inputs-without-my-permission/#comment-272</guid>
		<description>[...] This post was mentioned on Twitter by Terry Brown, Terry Brown. Terry Brown said: Chrome – are you sanitising my inputs without my permission? http://goo.gl/fb/arTtf [...]</description>
		<content:encoded><![CDATA[<p>[...] This post was mentioned on Twitter by Terry Brown, Terry Brown. Terry Brown said: Chrome – are you sanitising my inputs without my permission? <a href="http://goo.gl/fb/arTtf" rel="nofollow">http://goo.gl/fb/arTtf</a> [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>

