bugGnuheter - Bugs: bug #2661, Brott mot HTML-standarden:...

 
 

bug #2661: Brott mot HTML-standarden: "<img src=\"$imageurl\"...

Submitted by:  Christian von Schultz <schultz>
Submitted on:  Wed 26 Feb 2003 06:15:14 PM UTC  
 
Category: BugSeverity: 3 - Normal
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: None
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Wed 26 Feb 2003 07:24:04 PM UTC, comment #1:

Fixad av Aron.

Patrik Wallström <pawal>
Project Administrator
Wed 26 Feb 2003 06:15:14 PM UTC, original submission:

På rad 70 i filen banners.php kontrolleras inte variabeln $imageurl för ogiltiga tecken. Det problematiska tecknet är "&", vilket ska skrivas som "&amp;".

Föreslagen lösning:
$imageurl = htmlspecialchars($imageurl);
alternativt
$imageurl = str_replace("&", "&amp;", $imageurl);
mellan rad 67 och 68 i banners.php.

htmlspecialchars() konverterar även enkla och dubbla citationstecken, samt tecknen större-än och mindre-än. Den ser också lite snyggare ut, tycker jag :-)

Christian von Schultz <schultz>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 2 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Wed 26 Feb 2003 07:24:04 PM UTCpawalOpen/ClosedOpen=>(Error - Not Found)
Wed 26 Feb 2003 07:24:02 PM UTCpawalStatusNone=>(Error - Not Found)

Back to the top


Powered by Savane 3.1-cleanup1