We have moved to Github. Please open tickets there.

Opened 4 years ago

Closed 4 years ago

#882 closed Defect (fixed)

User generated content in HTML should not just be commented out

Reported by: kevinjardine Owned by:
Priority: normal Milestone:
Component: Core Version: 1.5
Severity: minor Keywords:
Cc: brettp Difficulty:

Description

Since user generated content can contain strings such as "-->" or "--", using HTML comments to attempt to remove it from display can lead to unexpected results that break the page layout.

An example (for Firefox) is here:

http://community.elgg.org/pg/bookmarks/carbonero/read/34296/featplug--featplug

and an explanation is in my comments in this thread:

http://community.elgg.org/mod/groups/topicposts.php?topic=32565&group_guid=23300

Although the specific example is broken only in Firefox, it would be easy to create an example that would break the layout in any browser.

Change History (2)

comment:1 Changed 4 years ago by marcus

On what pages does this occur, is it isolated to bookmarks?

comment:2 Changed 4 years ago by marcus

  • Resolution set to fixed
  • Status changed from new to closed

I believe that the issue highlighted in the link has been fixed in [svn:3176] for #914, please confirm that this has resolved your issue.

Note: See TracTickets for help on using tickets.