Bug 146670 - HTML special chars are not escaped for To-do list in Summary
Summary: HTML special chars are not escaped for To-do list in Summary
Status: RESOLVED FIXED
Alias: None
Product: kontact
Classification: Applications
Component: summary (show other bugs)
Version: 1.1
Platform: unspecified Linux
: NOR normal
Target Milestone: ---
Assignee: Allen Winter
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-06-11 16:13 UTC by Michaël Perrin
Modified: 2008-05-31 18:53 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michaël Perrin 2007-06-11 16:13:24 UTC
Version:           1.1 (using KDE 3.5.7, Debian Package 4:3.5.7.dfsg.1-1 (lenny/sid))
Compiler:          Target: i486-linux-gnu
OS:                Linux (i686) release 2.6.17-2-686

HTML tags are not escaped in the todo-list in the summary part of Kontact (no problem in the Todo-list part), causing strange behavior or unexpected things sometimes.

Steps to reproduce :
1. Go to the to-do list part of Kontakt.
2. Create a contact with some HTML tags (for example some text between b (<b> </b>) tags.
3. Go to the summary

Result : the text is in bold and the status bar of Kontakt becomes big.

HTML entities should be escaped so as not to have unexpected behavior. I indeed discoved the problem when I used some "<" or ">" chars in my todo-list.
Comment 1 Viliam Simko 2007-09-23 03:01:45 UTC
The same problem found in Kontact 3.5.6 on SUSE 10.0. I propose to remove HTML tags completly from the summary, instead of just escaping them. A smart regext should do the work.
Comment 2 Allen Winter 2008-05-29 15:36:35 UTC
This seems to work ok in the trunk version being prepared for the 4.1 release.

I see the to-do summaries in bold or italic (or both) just fine now.

However, there are other problems... for  example the summary "Fred << Ethel"
will cause only "Fred" to be shown.  I think because each '<' needs to
be converted to &lt;  

So I'm not closing yet
Comment 3 Allen Winter 2008-05-31 18:53:11 UTC
SVN commit 814894 by winterz:

escape <,>,& in non-richtext summaries
BUGS: 146670

need to do this for appointment and special date summaries too.


 M  +5 -1      todosummarywidget.cpp  


WebSVN link: http://websvn.kde.org/?view=rev&revision=814894