[Tickets #1910] NEW: Personal Options should encode HTML chars

bugs@bugs.horde.org bugs at bugs.horde.org
Wed May 4 15:15:53 PDT 2005


DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=1910
-----------------------------------------------------------------------
 Ticket             | 1910
 Created By         | horde at nonplus.net
 Summary            | Personal Options should encode HTML chars
 Queue              | Horde Base
 Version            | 3.0.2
 State              | Unconfirmed
 Priority           | 2. Medium
 Type               | Bug
 Owners             | 
-----------------------------------------------------------------------


horde at nonplus.net (2005-05-04 15:15) wrote:

An Identity name containing HTML characters may break the "Personal
Preferences" Horde Options page.  To prevent this, the identity select
should encode HTML characters in the identity name.

Specifically, I have saved an identity called "XML for <SCRIPT>".  Now
trying to change my Personal Preferences produces Javascript errors (both on
IE and FF) rendering the settings page unusable.




More information about the bugs mailing list