Download & Extend

HTML characters in option lists not properly escaped

Project:Content Taxonomy
Version:6.x-1.0-rc2
Component:Code
Category:bug report
Priority:minor
Assigned:weseze
Status:needs review

Issue Summary

To reproduce:
+ Create taxonomy with a few terms in, be sure to put a < or a > in one of the terms
+ Create a CCK content taxonomy field that selects these terms with the html characters in it
+ Go to the node add or edit page
You will now see that the term name is cut off at the < or > character.
I've created a patch that fixes the problem. Any feedback or improvements are very welcome.

Also, this issue might be related: http://drupal.org/node/301124

AttachmentSize
htmlspecialchars.patch686 bytes

Comments

#1

Correct patch here (the previous one had the change commented out...)

AttachmentSize
htmlspecialchars.patch 684 bytes

#2

Priority:normal» minor
Status:active» postponed (maintainer needs more info)

I tried to reproduce that and didn't get cut off term. May you provide example of term/screenshot?

#3

left in screenshot: the part of my taxonomy listing that I'm using
right in screenshot: the resulting CCK field

AttachmentSize
content_taxonomy_1153858.jpg 130.92 KB

#4

Status:postponed (maintainer needs more info)» patch (to be ported)

ok

#5

Status:patch (to be ported)» needs review

Just try your patch it certainly work, but not for one specific character which is ' in french it could be use like in the phrase "d'architecture"
It renders as '
Do you have any idea why it doesn't work for this character.
It's in a exposed filter of a view on a content taxonomy field ?

AttachmentSize
Capture d’écran 2011-11-07 à 15.37.46.png 23.83 KB

#6

Turns out that the problem is not with this module. Please do not apply patch. See: #321375: doesn't handle check_plain ("<any>" or "<none>" brakes)

nobody click here