Moodle

Web page resource. Contents stripslashed twice before output.

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Minor Minor
  • Resolution: Fixed
  • Affects Version/s: 1.9.3
  • Fix Version/s: 2.0
  • Component/s: Resource
  • Labels:
    None
  • Affected Branches:
    MOODLE_19_STABLE
  • Fixed Branches:
    MOODLE_20_STABLE

Description

Create a web page resource with text:

Some <evil> content & 'stuff\'
he, he, he!

(Typed into the HTML editor so the < is stored in the database as <)

Go and view the resource. You see

Some <evil> content & 'stuff' \ he, he, he!

That is, the content has had stripslashes applied once to often, before being output.

Activity

Hide
Petr Škoda (skodak) added a comment -

yes, this is caused by overuse of stripslashes_safe()
this is fixed in 2.0

Show
Petr Škoda (skodak) added a comment - yes, this is caused by overuse of stripslashes_safe() this is fixed in 2.0
Hide
Petr Škoda (skodak) added a comment -

Fixed in 2.0, thanks for the report.

Petr Skoda

Show
Petr Škoda (skodak) added a comment - Fixed in 2.0, thanks for the report. Petr Skoda

People

Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved: