Added configuration option to support HTML escaping by deafult.

Author: Ben Herila

docs/n2cms.configuration.xsd

@@ -362,6 +362,7 @@
 						<xs:attribute name="castleConfiguration" type="xs:string" use="optional" />
 						<xs:attribute name="multipleSitesConfiguration" type="xs:string" use="optional" />
 						<xs:attribute name="dynamicDiscovery" type="xs:boolean" use="optional" />
+						<xs:attribute name="defaultHtmlEscape" type="xs:boolean" use="optional" />
 						<xs:attribute name="castleSection" type="xs:string" use="optional" />
 						<xs:attribute name="engineType" type="xs:string" use="optional" />
 						<xs:attribute name="containerType" type="xs:string" use="optional" />

src/Framework/N2/Configuration/EngineSection.cs

@@ -46,6 +46,17 @@ public bool DynamicDiscovery
 			set { base["dynamicDiscovery"] = value; }
         }
 
+		/// <summary>
+		/// Default to escape HTML in titles and other single-entry fields.
+		/// </summary>
+		[ConfigurationProperty("defaultHtmlEscape", DefaultValue = false)]
+	    public bool DefaultHtmlEscape
+	    {
+			get { return (bool)base["defaultHtmlEscape"]; }
+			set { base["defaultHtmlEscape"] = value; }
+	    }
+
+
         /// <summary>Additional assemblies assemblies investigated while investigating the environemnt, e.g. to find item definitions.</summary>
 		[ConfigurationProperty("assemblies")]
 		public AssemblyCollection Assemblies

src/Framework/N2/Details/WithEditableTitleAttribute.cs

@@ -2,6 +2,7 @@
 using System.Web;
 using System.Web.UI;
 using System.Web.UI.WebControls;
+using N2.Configuration;
 using N2.Web.UI.WebControls;
 
 namespace N2.Details
@@ -34,7 +35,7 @@ public WithEditableTitleAttribute()
 		public WithEditableTitleAttribute(string title, int sortOrder)
 			: base(title, "Title", sortOrder)
 		{
-			AllowHtml = true; // TODO: Load default value from web.config
+			AllowHtml = N2.Context.Current.Resolve<EngineSection>().DefaultHtmlEscape;
 			Required = true;
 		}