Loading...
 
Skip to main content

For incoming RSS feeds -- escaped entities (&) in URL are not replaced with entities (&)

Status
Closed
Subject
For incoming RSS feeds -- escaped entities (&) in URL are not replaced with entities (&)
Version
1.9.x
Category
  • Error
Feature
Modules
RSS
Resolution status
Fixed or Solved
Lastmod by
Bernard Sfez / Tiki Specialist
Rating
(0)
Description

In the RSS module part of Tikiwiki, incoming RSS feeds are incorrectly parsed.

Escaped entities (& ' " etc.) have to be replaced with the entities themselves when the RSS feed is viewed. However, this is not done. As a result, when a user clicks on the links, the link still has references to (&) which makes it an invalid URL.

The problem is in "parse_rss_data" function of rsslib.php

Solution
Solution is straightforward. "preg_replace" should be used to replace all references to "&" with "&" in links. And all titles and descriptions should be similarly processed and all "'' and """ .. etc. have to be appropriately fixed.
Importance
6
Priority
30
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
545
Created
Saturday 15 April, 2006 13:12:30 UTC
by Unknown
LastModif
Sunday 10 October, 2021 14:15:26 UTC


Show PHP error messages