Skip to:
Content

BuddyPress.org

Opened 4 years ago

Closed 4 years ago

Last modified 4 years ago

#7027 closed defect (bug) (worksforme)

Angle brackets of links in profile fields are escaped

Reported by: dowen777 Owned by:
Milestone: Priority: highest
Severity: normal Version:
Component: Core Keywords: reporter-feedback
Cc:

Description

Email addresses, profile images and websites no longer display as links due to the escaping of < and > (left and right angle brackets).

For example, the email line on the page:
http://thelincolnacademyofillinois.org/members/robert_easter/

now reads as HTML code instead of as a clickable link. This is due to the left angle brackets, <, being replaced by & l t ; (spaces added) and the right angle bracket, >, being replaced by & g t ; (spaces added). This effectively breaks all profile images, email addresses and web URLs.

Also view:
view-source:http://thelincolnacademyofillinois.org/members/robert_easter/
line 671.

So, what should be HTML code is displayed as simple text.

Change History (4)

#1 @DJPaul
4 years ago

  • Keywords reporter-feedback added
  • Milestone changed from Awaiting Review to Under Consideration

@dowen777 Thanks for getting in touch with us.

I can't see the values in the HTML, probably because we're accessing the site logged-out.
For an affected user, can you go in and Edit their profile, and copy/paste the exact email address or other profile field value that causes the problem, please?

I'm interested to see where the < > characters are coming from, so we need to see what value you're putting into these fields.

Last edited 4 years ago by DJPaul (previous) (diff)

#2 follow-up: @dowen777
4 years ago

  • Milestone Under Consideration deleted
  • Resolution set to worksforme
  • Status changed from new to closed

I just updated my BuddyPress Xprofile Custom Fields Type plugin to version 2.4.6 and the problem has been fixed. Sorry I couldn't identify the source and thank you for taking my problem seriously. You guys are great. BuddyPress rules!

#3 in reply to: ↑ 2 @boonebgorges
4 years ago

Replying to dowen777:

I just updated my BuddyPress Xprofile Custom Fields Type plugin to version 2.4.6 and the problem has been fixed. Sorry I couldn't identify the source and thank you for taking my problem seriously. You guys are great. BuddyPress rules!

<3 <3 <3

#4 @DJPaul
4 years ago

  • Component changed from API to Core
Note: See TracTickets for help on using tickets.