Replies

Jul 10, 2017 8 years ago
Rocketlauncher
beat the meat!
User Avatar

In shop search, a shop name such as My shop (with the unclosed HTML tag) not only makes that shop name bold, but it can mess up the layout of the table containing other shops after that. Those HTML tags should be escaped.

Jul 11, 2017 8 years ago
Bug
User Avatar
Segfault

I brought this up with Keith last week, and he told me that shop names are not supposed to allow HTML. So I'll fix this asap. (I might have to talk to him again first.) For now, please open a ticket if you see anyone abusing this. Thanks!

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Jul 14, 2017 8 years ago Official
Bug
User Avatar
Segfault

I just fixed this. Please let us know again if there's other places things should be filtered and aren't. Thanks!

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Please log in to reply to this topic.