An Error message saved as a node title.

Created on 21 April 2016, almost 9 years ago
Updated 5 January 2025, 3 months ago

When I use "Evaluate PHP in pattern" checkbox of Auto Entity Label configuration and put

<?php
<script>alert('xss');</script>
?>

in the "Pattern for the title" textarea and created a node.

It saves the node which has title as "Parse error: syntax error, unexpected '<' in /Applications/MAMP/htdocs/brand-new/sites/all/modules/contrib/auto_entitylabel/auto_entitylabel.module(404) : eval()'d code on line 2 - See more at: http://brand-new.local/content/parse-error-syntax-error-unexpected#sthas..." and url of node is "parse-error-syntax-error-unexpected".

🐛 Bug report
Status

Closed: outdated

Version

1.3

Component

Code

Created by

🇮🇳India pankajsachdeva

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024