Bug 111848 - HTML code is not escaped to be shown by knotify
Summary: HTML code is not escaped to be shown by knotify
Status: RESOLVED FIXED
Alias: None
Product: konversation
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: Compiled Sources Linux
: NOR normal
Target Milestone: ---
Assignee: Konversation Developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-08-31 23:25 UTC by Candid Dauth
Modified: 2006-01-26 21:27 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description Candid Dauth 2005-08-31 23:25:32 UTC 
Version:            (using KDE KDE 3.4.2)
Installed from:    Compiled From Sources
OS:                Linux

I get notified by knotify through a passive window at new incoming messages in Konversation. knotify expects HTML code as text so that applications can format the text there (bold/italic, for example).

Well, Konversation gives unescaped text of the incoming message to knotify and does not encode “&” as “&” and so on.
So, when somebody writes “<test>” in the chat, the passive window doesn’t show that. When someone writes “<b>test</b>”, it appears as bold “test” in the passive window. And when they send “&ndash;”, the passive window displays “–”.

Konversation should escape “&” to “&amp;”, “<” to “&lt;”, “>” to “&gt;”, and — optionally — “"” to “&quot;”, when giving a received message to knotify.
Comment 1 Peter Simonsson 2006-01-26 21:27:20 UTC 
Fixed in trunk, will be in 0.19