Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug Report] Output not correctly escaped on v-select elements #2490

Closed
adrianrudnik opened this issue Nov 13, 2017 · 2 comments
Closed

[Bug Report] Output not correctly escaped on v-select elements #2490

adrianrudnik opened this issue Nov 13, 2017 · 2 comments

Comments

@adrianrudnik
Copy link

Versions and Environment

Vuetify: 0.16.9
Vue: 2.5.3
Browsers: Chrome 61.0.3163.100
OS: Windows 10

Steps to reproduce

Go to reproduction link, use the "Select" dropdown and test each element by selecting it.

Expected Behavior

Output escaping should be consistent. The v-select display should either always show and fill the escaped version or the unescaped one.

Actual Behavior

Its a mixed bag.

  • "test1" is shown equally on the first two elements, but selecting one or the other differs in the value filled into the input.
  • "test2" is the same.
  • "test3" allows the given value to contain html.
  • "test4" finally allows for script execution if the backend is not escaping the content correctly but also shows the correctly escaped content once selected.

Reproduction Link

https://codepen.io/kreischweide/pen/yPbwwy

@jacekkarczmarczyk
Copy link
Member

Already fixed in #2391

@lock
Copy link

lock bot commented Apr 15, 2019

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs. Please direct any non-bug questions to our Discord

@lock lock bot locked as resolved and limited conversation to collaborators Apr 15, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants