MySQL Bugs: #10464: TITLE tag for "Associated Issues" in issue listing tag not htmlspecialchar()'ed

Bug #10464	TITLE tag for "Associated Issues" in issue listing tag not htmlspecialchar()'ed
Submitted:	9 May 2005 9:40	Modified:	7 Jun 2005 14:17
Reporter:	Elan Ruusamäe (OCA)	Email Updates:
Status:	Closed	Impact on me:	None
Category:	Eventum	Severity:	S3 (Non-critical)
Version:	1.5.3	OS:	PLD Linux
Assigned to:	Joao Prado Maia	CPU Architecture:	Any

View
Add Comment
Files
Developer
Edit Submission
View Progress Log
Contributions

Description:
if you have issue who has "Associated Issues:" and that associated issue title happens to have double quotes, then the TITLE popup appears partial:

<a href="view.php?id=1150" title="issue #1150 (requirements) - add "blah" to here and there" class="link">#1150</a> 

How to repeat:
1. create new issue. make it's title include double quotes
2. create another issue, mark it's associated issue the previous issue you created
3. see the TITLE tag on second issue on issue details listing page

Suggested fix:
use htmlspecialchars() :)

Thanks for the report. This bug is fixed on Bitkeeper and will be included on 1.5.5.

--Joao