Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-27171

Custom tag attribute values are double-encoded

    XMLWordPrintable

    Details

      Description

      The ezxmltext datatype allows editors to embed custom tags. For example the 'factbox'. A custom tag may have input fields allowing the editor to type in text. For example 'Title' for the 'factbox'.

      If you type in a " (double-quote) char into the custom tag field, it is getting encoded twice before the value gets stored in the database. That's problematic because the template that renders the custom tag is not receiving the " char but '"' instead.

      Steps to reproduce:

      1. Create a new test article;
      2. On the "Body" field, insert a new "factbox" custom tag;
      3. The factbox has a "Title" field. Enter the following HTML code:

      <iframe src="http://www.example.com"></iframe>
      

      4. Save the custom tag, and publish the article;
      5. On the frontend, go to the test article, and you'll see the word "factbox", as expected. However, if you view the page source, you get this:

      <div class="ezxmltext-field"><custom xmlns:custom="http://ez.no/namespaces/ezpublish3/custom/" name="factbox" custom:title="&lt;iframe src=&amp;quot;http://www.mugo.ca&amp;quot;&gt;&lt;/iframe&gt;" custom:align="right"><p>factbox</p></custom>
      

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            nuno.oliveira-obsolete@ez.no Nuno Oliveira (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: