You don't want to say "nohtml" for plain text fields since that means you can't use < in them. Take the forum subject
field for example, you should be able to have a tag in the
subject, like "<blink> should be on the list of allowed tags", but not have to worry that you will have a blinking page as a consequence. Of course you could
ad_quotehtml all the plain text fields and not have noquote
but given how few places this was done correctly in 4.6.3 and before I am confident that OpenACS with noquote has far fewer
quoting bugs than previous versions.
Also, something like a user contribution page which shows
data from lots of different packages (some of which might
be missing validation like you are talking about) are much
safer with automatic html quoting.
It certainly was not hard to move most of the toolkit to
noquote and where it's wrong, the fix is pretty obvious
so I think the lack of backward compatibility is not a big deal at all (and if you submit a patch versus 4.6.3 to make
;noquote a noop we would be happy to apply it).
