[JIRA] Closed: (OFBIZ-869) Use ?html built-in on all String values by default

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[JIRA] Closed: (OFBIZ-869) Use ?html built-in on all String values by default

JIRA jira@ofbiz.org
     [ http://jira.undersunconsulting.com/browse/OFBIZ-869?page=all ]
     
Marco Risaliti closed OFBIZ-869:
--------------------------------

    Resolution: Won't Fix

For the moment I will close it if someone is interested on it can create a new issue.

> Use ?html built-in on all String values by default
> --------------------------------------------------
>
>          Key: OFBIZ-869
>          URL: http://jira.undersunconsulting.com/browse/OFBIZ-869
>      Project: [OFBiz] Open For Business
>         Type: Improvement
>   Components: ecommerce
>     Versions: SVN
>     Reporter: Benjamin Cox
>     Assignee: Jira Administrator

>
>
> When I try to put quotation marks in, say, the Product Name for my product, everything starting with first quotation mark is silently chopped off.  According to David, this is probably an HTML rendering thing, since these are not currently being escaped in the default templates.
> It would be best if they were - there are other characters, and administrators (often "mere mortals") should not be asked to use escape characters in their names.  A pass through the front-end applications to catch any of these strings that aren't currently being escaped would be in order.
> Also, David suggested supplying a service that can replace the HTML-escaped characters that people may currently have in their DBs to work around this issue.  That would probably be good to include while committing a fix for this issue.

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.undersunconsulting.com/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira