mahara-contributors team mailing list archive

[Kristina Hoeppner <1694874@xxxxxxxxxxxxxxxxxx>]

Also, quotation marks are not properly escaped when the user with the
quotation marks masquerades as another user. This is visible in the
notification bar at the top of the screen for "Become ... again" and in
the user profile sideblock "Become ... again".

** Summary changed:

- Quotation marks not escaped in name in group members block
+ Quotation marks not escaped in name in group members block and when masquerading

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1694874

Title:
  Quotation marks not escaped in name in group members block and when
  masquerading

Status in Mahara:
  Confirmed

Bug description:
  When a user's name (first or last or display name) contains double
  quotation marks, they are not escaped and shown as " in the
  "Members" block on the group homepage.

  It's not a problem on the "Members" page, but just in the "Members"
  block on the group homepage.

  To replicate:

  1. Set up a group and make sure that the group members block is displayed on the group homepage.
  2. Add double quotation marks to your
  a) first name
  b) last name
  c) display name (in a separate test)
  3. Go to the group homepage and check your name. 

  Expected result: The double quotation marks are shown.
  Actual result: Instead they are displayed as "

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1694874/+subscriptions