Bug 607110 - Issue Tracker doesn't escape HTML special characters
Summary: Issue Tracker doesn't escape HTML special characters
Status: CLOSED WONTFIX
Alias: None
Product: Issue-Tracker
Classification: Retired
Component: Other
Version: AMS Backlog
Hardware: All
OS: All
medium
medium
Target Milestone: ---
Assignee: Support Portal Development
QA Contact:
URL:
Whiteboard: TrackerBug
Keywords:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-06-23 09:25 UTC by GSS Tools User
Modified: 2011-01-07 19:43 UTC (History)
4 users (show)

(edit)
Clone Of:
(edit)
Last Closed: 2010-07-15 16:21:19 UTC


Attachments (Terms of Use)

Description GSS Tools User 2010-06-23 09:25:47 UTC
Takayoshi Kimura
tkimura@redhat.com

Description:
In issue description (possibly in issue subject), HTML special characters like '<>&' display as is. XML code is invisible or broken. It should be escaped when output.

Steps to Reproduce:
Here is example case:

https://access.redhat.com/issue-tracker/?module=issues&action=view&tid=1047113&gid=1354

Comment 1 Andrew Hecox 2010-06-23 14:15:07 UTC
hello Takayoshi-san,

is this something new or did Issue-Tracker have this problem when the portal launched?

Comment 2 Takayoshi Kimura 2010-06-23 14:24:11 UTC
It's new issue with new CSP. The old Issue-Tracker shows them correctly.

Comment 3 Andrew Hecox 2010-06-23 14:43:33 UTC
I'll file this to the CSP then, thank you.

Both you and your customers should be able to continue using I-T if you wish.

Comment 4 Shaun Appleton 2010-07-02 08:42:05 UTC
As a (not nice) workaround you can view the page source.

Comment 6 Tom Mirc 2010-07-15 16:21:19 UTC
CSP ticketing will be replaced on August 2nd with the new Customer Portal ticketing interface.

Closing this bug as a wontfix, as the CSP ticketing UI/character display issue will be irrelevant after August 2nd, and that's the 1st available release window.


Note You need to log in before you can comment on or make changes to this bug.