[Tickets #921] NEW: illegal img src tag doesn't allow image to be shown

[bugs at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=921
-----------------------------------------------------------------------
 Ticket     | 921
 Created By | kglueck at viz.tamu.edu
 Summary    | illegal img src tag doesn't allow image to be shown
 Queue      | Horde Framework Packages
 State      | Unconfirmed
 Priority   | 1. Low
 Type       | Bug
 Owners     | 
-----------------------------------------------------------------------


kglueck at viz.tamu.edu (2004-11-30 20:49) wrote:

recent change in Horde::img causes URL to be encoded with HTML tags.   The
change happened in rev 1.480 of framework/Horde/Horde.php.  the problem (as
far as I see), is that the src attribute is now sent through (on line
822/823) the @htmlspecialchars function which results in an img src tag that
has this as the src value:
"https://www-viz.tamu.edu/internal/horde/klutz/comics.php?actionID=image&amp
;date=1101871706&index=bc"  the ampersand shouldn't be an html tag
inside of there.  (not sure if the above text will be shown correctly,
but...)

Kevin