[Tickets #1910] NEW: Personal Options should encode HTML chars
bugs@bugs.horde.org
bugs at bugs.horde.org
Wed May 4 15:15:53 PDT 2005
DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.
Ticket URL: http://bugs.horde.org/ticket/?id=1910
-----------------------------------------------------------------------
Ticket | 1910
Created By | horde at nonplus.net
Summary | Personal Options should encode HTML chars
Queue | Horde Base
Version | 3.0.2
State | Unconfirmed
Priority | 2. Medium
Type | Bug
Owners |
-----------------------------------------------------------------------
horde at nonplus.net (2005-05-04 15:15) wrote:
An Identity name containing HTML characters may break the "Personal
Preferences" Horde Options page. To prevent this, the identity select
should encode HTML characters in the identity name.
Specifically, I have saved an identity called "XML for <SCRIPT>". Now
trying to change my Personal Preferences produces Javascript errors (both on
IE and FF) rendering the settings page unusable.
More information about the bugs
mailing list