Halogen Labs Weblog

Here’s a worthless error. Either I’m missing some small detail about the potential for HTML or Javascript injection on the client side, or this eBay error you get when you’re composing a message to someone is really, really stupid:

HTML I can understand for the privacy/security of the intended recipient of the message, but what about asterisks and quotes? Why would you want to restrict something as common as quotation marks in a message?

Which leads me to my first law of form validation:
Don’t prevent people from typing something they might normally type.

This entry was posted on Saturday, June 24th, 2006 at 3:45 pm and is filed under Usability. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.