https://www.icyphoenix.com/viewtopic.php?f=2&t=9848
-----------------------------------
Cristianita
Fri 11 May, 2018 07:38

Using Quotes (") In The Topic Title, It Shows This Signs (&quot;) In The Quick Reply.
-----------------------------------
[align=center][img]http://easycaptures.com/fs/uploaded/1131/6763945597.jpg[/img]

[img]http://easycaptures.com/fs/uploaded/1131/1812975536.jpg[/img][/align]

even in the browser tab:

[align=center][img]http://easycaptures.com/fs/uploaded/1131/8943905888.jpg[/img][/align]

But not in "POST REPLY" I mean normal reply...

[align=center][img]http://easycaptures.com/fs/uploaded/1131/1981736027.jpg[/img]

[img]http://easycaptures.com/fs/uploaded/1131/0572942592.jpg[/img][/align]

Why?  :oops:


-----------------------------------
Informpro
Sat 12 May, 2018 21:50

Re: Using Quotes (&quot;) In The Topic Title, It Shows This Signs (&amp;quot;) In The Quick Reply.
-----------------------------------
Hi;

It is done to avoid HTML injection, but this one case needs to be smarter -- we need to differentiate between a value that could be from an attacker or from a trusted source.


-----------------------------------
Cristianita
Sat 12 May, 2018 22:07

Re: Using Quotes (&quot;) In The Topic Title, It Shows This Signs (&amp;quot;) In The Quick Reply.
-----------------------------------
[quote user="Informpro" post="61650"]Hi;

It is done to avoid HTML injection, but this one case needs to be smarter -- we need to differentiate between a value that could be from an attacker or from a trusted source.[/quote]I'm not sure if I understood you. I think you are saying you need to check this feature, aren't you? :mryellow:


-----------------------------------
Informpro
Sat 19 May, 2018 15:34

Re: Using Quotes (&quot;) In The Topic Title, It Shows This Signs (&amp;quot;) In The Quick Reply.
-----------------------------------
Hi,

Yes, I am saying we are trying to be safe, but we are [b]too[/b] safe because of this.


-----------------------------------
Cristianita
Sat 19 May, 2018 22:47

Re: Using Quotes (&quot;) In The Topic Title, It Shows This Signs (&amp;quot;) In The Quick Reply.
-----------------------------------
[quote user="Informpro" post="61668"]Hi,

Yes, I am saying we are trying to be safe, but we are [b]too[/b] safe because of this.[/quote]So it's better if we don't use this quotes in the titles, isn't it? Is that what you mean?


-----------------------------------
Mighty Gorgon
Tue 05 Jun, 2018 00:12

Re: Using Quotes (&quot;) In The Topic Title, It Shows This Signs (&amp;quot;) In The Quick Reply.
-----------------------------------
I will fix the issue in Quick Reply, but I won't fix it on page title, since injections may be possible.

I'm sure I added all these fixes because of security reasons in the past.


-----------------------------------
Cristianita
Tue 05 Jun, 2018 01:00

Re: Using Quotes (&quot;) In The Topic Title, It Shows This Signs (&amp;quot;) In The Quick Reply.
-----------------------------------
[quote user="Mighty Gorgon" post="61703"]I will fix the issue in Quick Reply, but I won't fix it on page title, since injections may be possible.

I'm sure I added all these fixes because of security reasons in the past.[/quote]
I got it... Thanks for all, [user]2[/user]


-----------------------------------
Cristianita
Sat 18 Aug, 2018 19:04

Re: Using Quotes (&quot;) In The Topic Title, It Shows This Signs (&amp;quot;) In The Quick Reply.
-----------------------------------
Hi, God bless you, guys!


