helpSavannah Administration - Support: sr #106487, Wrong HTML chars displayed in...

 
 
Show feedback again

sr #106487: Wrong HTML chars displayed in status after changes in items

Submitted by:  FlashCode <flashcode>
Submitted on:  Tue 02 Sep 2008 07:30:22 PM UTC  
 
Category: Savannah websitePriority: 5 - Normal
Severity: 3 - NormalStatus: Confirmed
Assigned to: Sylvain Beucler <Beuc>Operating System: GNU/Linux
Open/Closed: Open

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 02 Sep 2008 09:02:39 PM UTC, comment #1:

Thanks for the report. I was recently pointed that there was an XSS in that contact and I had to disable HTML there. We didn't have time to properly clean all messages yet, this is in progress.

Sylvain Beucler <Beuc>
Site AdministratorIn charge of this item.
Tue 02 Sep 2008 07:30:22 PM UTC, original submission:

When I change items (like bugs, tasks, ..) I see a green status, with target emails for current operation.
In this status, I see some HTML chars like that (french message, I added spaces to be sure it's not translated to HTML):
"Courriel envoyé à FlashCode & l t ; xxxxxxx@flashtux.org& g t ;, -unavailable-

FlashCode <flashcode>

 

(Note: upload size limit is set to 512 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by Beuc (Posted a comment)
  • -unavailable- added by flashcode (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter 421 here (basic anti-spam test):

     

     

    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 02 Sep 2008 09:02:39 PM UTCBeucStatusNone=>Confirmed
      Assigned toNone=>Beuc
    Show feedback again

    Back to the top


    Powered by Savane 3.1-cleanup