Closed (fixed)
Project:
Drupal core
Version:
x.y.z
Component:
comment.module
Priority:
Critical
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
11 Dec 2005 at 11:57 UTC
Updated:
9 Feb 2006 at 08:32 UTC
Jump to comment: Most recent file
Comments
Comment #1
Wesley Tanaka commentedComment #2
Wesley Tanaka commentedComment #3
dries commentedYour code is vulnerable to XSS attacks.
Comment #4
Wesley Tanaka commentedComment #5
Wesley Tanaka commentedjust confirmed that patch still applies against 4.7.0-test2
Comment #6
moshe weitzman commentedi made the destination smarter so that it links to the right page depending on whether comments are being displayed on other page or not.
i also fixed a logic bug when displaying this link on nodes. the link would not show up when comment form was placed on own page.
Comment #7
dries commentedIncorrect use of url(). Fragments can be passed as the third argument so no need to fudge with urlencode(). Patch has tabs.
Comment #8
moshe weitzman commentedrerolled with proper use of url(). thanks.
Comment #9
moshe weitzman commentednow without tabs
Comment #10
dries commentedCommitted to HEAD. Thanks.
Comment #11
(not verified) commented