Issue: Wiki Navbar Dropdown Not HTML Safe

Issue Tools
- View Changes

July 25, 2008 2:06 PM

pegasus

VaultWiki Team

Wiki Navbar Dropdown Not HTML Safe

Entering characters like &, <, >, etc. causes validation errors

The navbar wiki links dropdown uses $vboptions['ces_wiki_name'] for its title. Validation problems arise when site owners put invalid characters in this setting without HTML encoding them. Perhaps this value should be processed before being used in the page.

Issue Details

Issue Number 132

Issue Type Bug

Project VaultWiki 3.x Series

Category Styling / CSS

Status Fixed

Priority 7 - Minor Features / Enhancements

Affected Version 2.0.0 RC3

Fixed Version 2.0.0

Milestone VaultWiki 2.0.0

Software DependencyAny

Users able to reproduce bug 0

Users unable to reproduce bug 0

Attachments 0

Assigned Users (none)

Tags (none)

July 25, 2008 2:08 PM

pegasus

VaultWiki Team

Ran htmlspecialchars_uni on the setting. From now on use $vboptions[ces_wiki_name_safe] in templates.

Reply

+ Reply

All times are GMT -4. The time now is 1:25 AM.

This site uses cookies to help personalize content, to tailor your experience, and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.

Learn more… Accept Remind me later

Welcome to VaultWiki.org, home of the wiki add-on for vBulletin and XenForo!

Issue: Wiki Navbar Dropdown Not HTML Safe

Issue Tools