Ticket #570 (closed defect: fixed)

Opened 13 years ago

Last modified 13 years ago

Blog comments allow html

Reported by: tarmo Owned by: jukka
Priority: major Milestone:
Component: generic Version:
Keywords: Cc:
Time planned: 1h Time remaining: 0h
Time spent: 1.5h


Blog comments allow html to be entered, with no checks for validity or safety. HTML should not be allowed.

Change History

comment:1 Changed 13 years ago by jukka

  • Owner changed from anonymous to jukka
  • Status changed from new to assigned
  • Time planned set to 1h

comment:2 Changed 13 years ago by jukka

  • Status changed from assigned to closed
  • Time spent set to 1.5h
  • Resolution set to fixed
  • Time remaining set to 0h

(In [541]) Fixed #570, spent 1.5h. At the end it was using our previous WYSIWYM-renderer, so it was only as unsafe as it was, and the otherwise it uses plone's discussion tool, which I presume to be safe enough. Changed to plain text.

Note: See TracTickets for help on using tickets.