Uploaded image for project: 'Magnolia'
  1. Magnolia
  2. MAGNOLIA-1897

HTML Tags in Page Titles Should Be Escaped in Admin Interface

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • 4.3.3, 4.4
    • 3.0.5
    • admininterface
    • None
    • All

      If one enters HTML tags as part of a Page Title, and then views the page hierarchy in AdminCentral, those HTML tags are interpreted, which can mess up rendering of the AdminConsole. (For example, try putting a few "<br/>" tags in a page title.)

      The same issue applies to the "Full Role Name" field in Roles, the "Full Group Name" field in Groups, and the "Full Name" field in Users.

      To reproduce:

      1. Enter "page<br/>name<br/>test" for a page name in AdminConsole
      2. Press the "refresh button"

      Expected result:

      The page name would display as entered.

      Actual result:

      The page name is spread across 3 lines and overlaps any items below it.

        Acceptance criteria

              ochytil Ondrej Chytil
              seanmctex Sean McMains
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Bug DoR
                  Task DoD