Forums

(CC v1.2, J!1.5.9) Editing records: " not escaped properly.

nml375 23 Mar, 2009
Just noticed that, if you edit a record in frontend (backend not tested) which contains ", it will not be properly escaped. This results in parts of the value being dropped and bogus properties being added. I guess the source below best explains the issue at hand.

Record data:
Har spelat en hel del med "Drblind" som hade varit med er i bc.

The resulting edit form:
...
<td><input name="vouch" value="Har spelat en hel del med " drblind="" som="" hade="" varit="" med="" er="" i="" bc.="" type="text"></td>
...

Corresponding autogenerated code:
...
<td><input ccnamex="vouch" cctypex="text" ccvaluex="{vouch}"></td>
...
This topic is locked and no more replies can be posted.

VPS & Email Hosting 20% discount
hostinger