Upgrading to 2.3 causes items like "What's New" to display as "What's New".

Comments

PixelClever’s picture

PixelClever commented
Status: Active » Fixed

Fixed in 2.4... this was actually an issue caused by the earlier security release, the security team wanted to make sure that all output had check_plain applied, but in this case the output had already been filtered higher up in the system so it was getting run twice.

jzornig’s picture

jzornig commented

Just installed 2.4. No sign of this fix. The issue is still there. I did a diff between the 2.3 distribution and 2.4 and there are no changes related to check_plain, only db_rewrite_sql changes.

jzornig’s picture

jzornig commented
Status: Fixed » Active
jzornig’s picture

jzornig commented
Version: 6.x-2.3 » 6.x-2.4

if i revert this change that occurred in 2.2 -> 2.3 and is still there in 2.4, it fixes the problem for me.


489c508
<       $book_title  = $book->title;
---
>       $book_title  = check_plain($book->title);
PixelClever’s picture

PixelClever commented

That was the change that I made... I think somehow it didn't get committed correctly. I will try again.

PixelClever’s picture

PixelClever commented

I just double checked my local version that was committed and it has that line changed, but for some reason the commit didn't register it. I committed the file again with a new tag (2.5) with the hope that it will show up correctly this time.

jzornig’s picture

jzornig commented
Status: Active » Closed (fixed)

Aaron, thanks for the quick turnaround. 2.5 does the trick.