#249 - Ticket Summary is not escaped properly if updating Ticket

Description

What did you do to cause this? Created a ticket with Summary containing "doublequotes". Then made any change to the ticket (change Status, Priority, Attachmet, whatever) and press Update. The field Summary is not escaped properly in the form and will be trimmed upon Update ending just before the first doublequote. Summary should be processed with PHP function htmlspecialchars() when displaying in an input type="text".

What page were you on? Ticket update form.

What PHP and MySQL versions do you run? dev-lang/php-5.3.10 dev-db/mysql-5.1.61

Describe the defect: Summary is trimmed upon update. All characters after doublequote will disappear.

Activity

Jack closed as Fixed 13 years and 7 months ago

Status

Fixed
-
Normal

Details

Defect
2.3.3
Tickets
2.3.2
Normal

Tracking

Trupik
13 years and 7 months ago
11 years and 11 months ago
0
-
-