|
Page 1 of 1
|
 Cristianita 
Joined: October 2015
Posts: 297
Location:  Sonora, México
|
 Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
even in the browser tab:
But not in "POST REPLY" I mean normal reply...
Why? 
|
#1 Fri 11 May, 2018 07:38 |
|
Sponsors
|
Icy Phoenix is an open source project, you can show your appreciation and support future development by donating to the project.
|
| |
Informpro 
Joined: October 2008
Posts: 1110
Location: 
|
Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Hi;
It is done to avoid HTML injection, but this one case needs to be smarter -- we need to differentiate between a value that could be from an attacker or from a trusted source.
|
#2 Sat 12 May, 2018 21:50 |
|
Cristianita
Joined: October 2015
Posts: 297
Location: Sonora, México
|
Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Hi;
It is done to avoid HTML injection, but this one case needs to be smarter -- we need to differentiate between a value that could be from an attacker or from a trusted source.
I'm not sure if I understood you. I think you are saying you need to check this feature, aren't you? 
|
#3 Sat 12 May, 2018 22:07 |
|
Informpro
Joined: October 2008
Posts: 1110
Location:
|
Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Hi,
Yes, I am saying we are trying to be safe, but we are too safe because of this.
|
#4 Sat 19 May, 2018 15:34 |
|
Cristianita
Joined: October 2015
Posts: 297
Location: Sonora, México
|
Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Hi,
Yes, I am saying we are trying to be safe, but we are too safe because of this.
So it's better if we don't use this quotes in the titles, isn't it? Is that what you mean?
|
#5 Sat 19 May, 2018 22:47 |
|
Mighty Gorgon
Luca Libralato
Joined: August 2006
Posts: 7192
Location:  Borgo San Michele
|
Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
I will fix the issue in Quick Reply, but I won't fix it on page title, since injections may be possible.
I'm sure I added all these fixes because of security reasons in the past.
____________ Luca
SEARCH is the quickest way to get support.
Icy Phoenix ColorizeIt - CustomIcy - HON
|
#6 Tue 05 Jun, 2018 00:12 |
|
Cristianita
Joined: October 2015
Posts: 297
Location: Sonora, México
|
Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
I will fix the issue in Quick Reply, but I won't fix it on page title, since injections may be possible.
I'm sure I added all these fixes because of security reasons in the past.
I got it... Thanks for all, Mighty Gorgon
|
#7 Tue 05 Jun, 2018 01:00 |
|
Cristianita
Joined: October 2015
Posts: 297
Location: Sonora, México
|
Re: Using Quotes (") In The Topic Title, It Shows This Signs (") In The Quick Reply.
Hi, God bless you, guys!
|
#8 Sat 18 Aug, 2018 19:04 |
|
|
|
Page 1 of 1
|
 Was this topic useful?
 Was this topic useful?
| Link this topic |
|---|
| URL |
|
| BBCode |
|
| HTML |
|
Similar Topics
Similar Topics
You cannot post new topics
You cannot reply to topics
You cannot edit your posts
You cannot delete your posts
You cannot vote in polls
You cannot attach files
You can download files
You cannot post calendar events
|
|
|
|
