After upgrading Drupal to 4.6.4 I notice errors in the store overview page. In all URIs ampersand is a & instead of &. None of these malformed links work. Still looking what could be the cause.

Comments

ñull’s picture

ñull commented

So far I discovered that it must have to do with the new filter_xss functions that clean URIs from malicious code. There is a line in this function that converts & to &!! I wonder how to get around it. The URIs are formed using the l() function. Is there a way to turn off this checking?

Timotheos’s picture

Timotheos commented

This was a problem in 4.6.4 and one of the reasons there is now 4.6.5 http://drupal.org/drupal-4.6.5

ñull’s picture

ñull commented

I patched 4.6.4 with http://drupal.org/files/issues/check_url.patch

Eglish’s picture

Eglish commented
Status: Active » Fixed

Sounds like fixed.

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)