Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

Impossible to remov...
 
Notifications
Clear all

Impossible to remove assignement when username contain a '

2 Posts
2 Users
0 Reactions
4,289 Views
(@sebastienp)
Posts: 16
Active Member
Topic starter
 
[#531]

Hi,

I's impossible to remove assignment when user name containe a ' character.

The ' is not "protected" in the HTML generated:

Here is the buggy javascript code:

removeAssignment('44','0','Sébastien PRUD'HOMME');


 
Posted : 21 May 2012 19H56
babynus
(@babynus)
Posts: 14957
Main Contributor Admin
 

Hi,
bug confirmed and fixed.
fixing is : replace in /tool/objectDetail.php, line 1661 :

               . SqlList::getNameFromId('Resource', $assignment->idResource)  . "'" . ');" ' 

with

               . htmlEncode(SqlList::getNameFromId('Resource', $assignment->idResource),'quotes')  . "'" . ');" ' 

Ticket #685 registered.

Thanks for reporting.


 
Posted : 21 May 2012 21H23
Share:

Scroll to Top