html - Do I really need to encode '&' as '&'? -
i'm using '&
' symbol html5 , utf-8 in site's <title>
. google shows ampersand fine on serps, browsers in titles.
http://validator.w3.org giving me this:
& did not start character reference. (& should have been escaped
&
.)
do need &
?
i'm not fussed pages validating sake of validating, i'm curious hear people's opinions on , if it's important , why.
yes. error said, in html, attributes #pcdata meaning they're parsed. means can use character entities in attributes. using &
wrong , if not lenient browsers , fact html not xhtml, break parsing. escape &
, fine.
html5 allows leave unescaped, when data follows not valid character reference. however, it's better escape instances of symbol worry ones should , ones don't need be.
keep point in mind; if you're not escaping & &, it's bad enough data create (where code invalid), might not escaping tag delimiters, huge problem user-submitted data, lead html , script injection, cookie stealing , other exploits.
please escape code. save lot of trouble in future.
Comments
Post a Comment