Icy Phoenix


General Support - Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.



Cristianita [ Fri 11 May, 2018 07:38 ]
Post subject: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
6763945597

1812975536


even in the browser tab:

8943905888


But not in "POST REPLY" I mean normal reply...

1981736027

0572942592


Why?


Informpro [ Sat 12 May, 2018 21:50 ]
Post subject: Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Hi;

It is done to avoid HTML injection, but this one case needs to be smarter -- we need to differentiate between a value that could be from an attacker or from a trusted source.


Cristianita [ Sat 12 May, 2018 22:07 ]
Post subject: Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Informpro wrote: [View Post]
Hi;

It is done to avoid HTML injection, but this one case needs to be smarter -- we need to differentiate between a value that could be from an attacker or from a trusted source.
I'm not sure if I understood you. I think you are saying you need to check this feature, aren't you?


Informpro [ Sat 19 May, 2018 15:34 ]
Post subject: Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Hi,

Yes, I am saying we are trying to be safe, but we are too safe because of this.


Cristianita [ Sat 19 May, 2018 22:47 ]
Post subject: Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Informpro wrote: [View Post]
Hi,

Yes, I am saying we are trying to be safe, but we are too safe because of this.
So it's better if we don't use this quotes in the titles, isn't it? Is that what you mean?


Mighty Gorgon [ Tue 05 Jun, 2018 00:12 ]
Post subject: Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
I will fix the issue in Quick Reply, but I won't fix it on page title, since injections may be possible.

I'm sure I added all these fixes because of security reasons in the past.


Cristianita [ Tue 05 Jun, 2018 01:00 ]
Post subject: Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Mighty Gorgon wrote: [View Post]
I will fix the issue in Quick Reply, but I won't fix it on page title, since injections may be possible.

I'm sure I added all these fixes because of security reasons in the past.

I got it... Thanks for all, avatar Mighty Gorgon


Cristianita [ Sat 18 Aug, 2018 19:04 ]
Post subject: Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Hi, God bless you, guys!




Powered by Icy Phoenix