[Tickets #10996] Re: tooltips.js on from: generates HTML tags

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/10996
------------------------------------------------------------------------------
  Ticket             | 10996
  Updated By         | viktor at szepe.net
  Summary            | tooltips.js on from: generates HTML tags
  Queue              | IMP
  Version            | 5.0.17
  Type               | Bug
  State              | Unconfirmed
  Priority           | 3. High
  Milestone          |
  Patch              | 1
  Owners             |
------------------------------------------------------------------------------


viktor at szepe.net (2012-02-16 00:34) wrote:

when js writes the email address enclosed in < and > into the tooltip  
div, it is rendered as an HTML tag: <name at email.tld>
result: not displaying the address in "New message to" tooltip
1 minute patch:
e.store('nicetitle', t.replace("<", "&lt;").replace(">", "&gt;"));
instead of
e.store('nicetitle', t);
it needs a complete HTML encoder in js OR a double encoder in php