Error handling for use of HTML tag characters

mandjreid · Post by **mandjreid** » Wed Feb 22, 2012 6:26 pm

I tried using the < and > characters in the article text, and when Adding the article those characters and all between them were dropped from the text field. They probably need to be encoded on entry and decoded on display -- or the user should get an error message saying the characters aren't allowed.

Thanks!

mandjreid · Post by **mandjreid** » Wed Feb 22, 2012 6:29 pm

Sorry -- I should add here that the first display of those characters is fine, but when I go to re-edit the article, it gets dropped. So it's on the edit form display and not the post or read-only display where it gets dropped.

cognifloyd · Post by **cognifloyd** » Wed Feb 22, 2012 6:30 pm

Works for me.
I can add < and > on separate lines, on the same line, with spaces in, and without. I've even tried <div>, and the < and > show up just fine in the output - they are properly encoded/escaped.

cognifloyd · Post by **cognifloyd** » Wed Feb 22, 2012 6:32 pm

I can verify this. < and > can be posted the first time, but everything between them is dropped on edit.