Using Quotes (") In The Topic Title, It Shows This Signs (&quot;) In The Quick Reply.

The time now is Tue 23 Apr, 2024 03:07 • All times are UTC + 1 Hour [DST enabled]

Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.

Article
Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
even in the browser tab: But not in "POST REPLY" I mean normal reply... Why? :oops:
Cristianita [ Fri 11 May, 2018 07:38 ]

Sponsors	Icy Phoenix is an open source project, you can show your appreciation and support future development by donating to the project.

Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.

Comments
Re: Using Quotes (") In The Topic Title, It Shows This Signs (&quot;) In The Quick Reply.
Hi; It is done to avoid HTML injection, but this one case needs to be smarter -- we need to differentiate between a value that could be from an attacker or from a trusted source.
Informpro [ Sat 12 May, 2018 21:50 ]

Re: Using Quotes (") In The Topic Title, It Shows This Signs (&quot;) In The Quick Reply.
Informpro wrote: [View Post] Hi; It is done to avoid HTML injection, but this one case needs to be smarter -- we need to differentiate between a value that could be from an attacker or from a trusted source. I'm not sure if I understood you. I think you are saying you need to check this feature, aren't you? :mryellow:
Cristianita [ Sat 12 May, 2018 22:07 ]

Re: Using Quotes (") In The Topic Title, It Shows This Signs (&quot;) In The Quick Reply.
Hi, Yes, I am saying we are trying to be safe, but we are too safe because of this.
Informpro [ Sat 19 May, 2018 15:34 ]

Re: Using Quotes (") In The Topic Title, It Shows This Signs (&quot;) In The Quick Reply.
Informpro wrote: [View Post] Hi, Yes, I am saying we are trying to be safe, but we are too safe because of this. So it's better if we don't use this quotes in the titles, isn't it? Is that what you mean?
Cristianita [ Sat 19 May, 2018 22:47 ]

Re: Using Quotes (") In The Topic Title, It Shows This Signs (&quot;) In The Quick Reply.
I will fix the issue in Quick Reply, but I won't fix it on page title, since injections may be possible. I'm sure I added all these fixes because of security reasons in the past.
Mighty Gorgon [ Tue 05 Jun, 2018 00:12 ]

Re: Using Quotes (") In The Topic Title, It Shows This Signs (&quot;) In The Quick Reply.
Mighty Gorgon wrote: [View Post] I will fix the issue in Quick Reply, but I won't fix it on page title, since injections may be possible. I'm sure I added all these fixes because of security reasons in the past. I got it... Thanks for all, Mighty Gorgon
Cristianita [ Tue 05 Jun, 2018 01:00 ]

Re: Using Quotes (") In The Topic Title, It Shows This Signs (&quot;) In The Quick Reply.
Hi, God bless you, guys!
Cristianita [ Sat 18 Aug, 2018 19:04 ]

Display posts from previous:

Was this topic useful?

Page 1 of 1

The time now is Tue 23 Apr, 2024 03:07 • All times are UTC + 1 Hour [DST enabled]

This is a "Lo-Fi" version of our main content. To view the full version with more information, formatting and images, please click here.

Powered by Icy Phoenix based on phpBB
Generation Time: 0.1324s (PHP: 21% SQL: 79%)
SQL queries: 17 - Debug Off - GZIP Enabled

Icy Phoenix

Icy Phoenix - Powering Communities

Using Quotes (") In The Topic Title, It Shows This Signs (&quot;) In The Quick Reply.

Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.