Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-14985

Plain text is stored as HTML and not decoded before usage

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.2.0
    • Fix Version/s: 3.2.1-RC1
    • Component/s: None
    • Labels:
      None

      Description

      Some reports about issues with HTML special characters in 3.2 have appeared recently:

      The problem is the same for both: admin-submitted text is encoded and stored as HTML, then it is used in contexts where plain text is expected. This is all new to me but judging from the commit log it's been that way since 2011 so I guess I just never noticed it.

      If every text field is encoded to HTML for storage then phpbb\textformatter\data_access should probably be modified to automatically decode them to plain text.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                nicofuma nicofuma
                Reporter:
                JoshyPHP JoshyPHP
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: