Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Custom field edits can trigger erroneous 'HTML tags are not allowed' messages #7660

Closed
sbulen opened this issue Dec 26, 2022 · 0 comments
Closed
Milestone

Comments

@sbulen
Copy link
Contributor

sbulen commented Dec 26, 2022

Description

This appears to be specific to profile fields that do not have other validations, e.g., regex or lists, etc.

The error appears to happen when you use single or double quote characters in these fields.

Steps to reproduce

  1. Enter text that includes either a single or double quote into a custom profile field - that does not have another edit defined (no regex).
  2. This happens when using the standard Location & Skype fields, as well as any new custom field added.

image

Environment (complete as necessary)

  • Version/Git revision: 2.1.3
  • Database Type: MySQL
  • Database Version: 8.0
  • PHP Version: 8.1

Additional information/references

From the forum:
https://www.simplemachines.org/community/index.php?topic=583519.0

@sbulen sbulen added this to the 2.1.4 milestone Dec 26, 2022
@sbulen sbulen modified the milestones: 2.1.4, 2.1.5 Mar 12, 2023
Sesquipedalian added a commit to Sesquipedalian/SMF that referenced this issue May 10, 2024
Sesquipedalian added a commit to Sesquipedalian/SMF that referenced this issue Jun 26, 2024
Fixes SimpleMachines#7660

Signed-off-by: Jon Stovell <jonstovell@gmail.com>

# Conflicts:
#	Sources/Profile-Modify.php
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants