Tickets :: [#1910] Personal Options should encode HTML chars

Summary	Personal Options should encode HTML chars
Queue	Horde Base
Queue Version	3.0.2
Type	Bug
State	Resolved
Priority	2. Medium
Owners	Horde Developers (at)
Requester	horde (at) nonplus (dot) net
Created	05/04/2005 (7339 days ago)
Due
Updated	05/05/2005 (7338 days ago)
Assigned	05/05/2005 (7338 days ago)
Resolved	05/05/2005 (7338 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch	No

05/05/2005 06:31:08 PM	Chuck Hagenbuch	Comment #2 State ⇒ Resolved	Reply to this comment
Fixed in HEAD and for Horde 3.0.5.

05/05/2005 11:59:40 AM	Jan Schneider	Assigned to Horde Developers State ⇒ Assigned

05/04/2005 10:15:52 PM	horde (at) nonplus (dot) net	Comment #1 State ⇒ Unconfirmed Priority ⇒ 2. Medium Type ⇒ Bug Summary ⇒ Personal Options should encode HTML chars Queue ⇒ Horde Base	Reply to this comment
An Identity name containing HTML characters may break the "Personal Preferences" Horde Options page. To prevent this, the identity select should encode HTML characters in the identity name. Specifically, I have saved an identity called "XML for <SCRIPT>". Now trying to change my Personal Preferences produces Javascript errors (both on IE and FF) rendering the settings page unusable.