- 🇺🇸United States ultimike Florida, USA
Needs test(s) and guidance about if this introduces a security issue.
- 🇺🇸United States ultimike Florida, USA
The patch and MR have different changes - someone needs to:
- Determine which, if either, fix the original issue (using a unicode code as an ellipse).
- Ensure the MR is up-to-date against 2.1.x.
- Add a test.
-mike
- Status changed to Needs review
about 1 year ago 2:08pm 26 August 2023 - 🇺🇸United States ultimike Florida, USA
I updated the current MR against 2.1.x, added some tests, and decided to use `json_decode()`. I didn't find anything that led me to believe that using `json_decode()` is a security issue, but I did wrap it in an `Html::escape()` to be safe. Tests are passing, needs a review or two.
I also added a `#description` to the formatter config "Suffix" field reading, "Unicode character identifiers of the form \u2026 allowed.".
-mike
- Status changed to RTBC
about 1 year ago 3:13pm 4 September 2023 - 🇺🇸United States markie Albuquerque, NM
Tested locally and was able to convert \u2026 to ...
Anyone want to look at this before I merge?
- First commit to issue fork.
- 🇮🇪Ireland lostcarpark
I have tested that putting "\u2026" in the suffix in the 2.1.x branch and in the issue fork, and verified that without this change, "\u2026" gets appended to the text. With the change, it correctly gets converted to "…".
I've reviewed the code and it looks good to me.
The one thing that occurs to me is that if for some reason you actually want to have "\u" in the suffix, you should be able to do so. I have verified that if you put "\\u" in the suffix, it converts to "\u". I feel it's worth adding a test for that case, so I have added that to TruncateHtmlTest.php. Note that because you can have \" in single quotes, \\ converts to a single slash, so you need \\\\ to represent a double backslash.
- Status changed to Needs review
about 1 year ago 6:49am 5 September 2023 -
ultimike →
committed 6e4ffb75 on 2.1.x authored by
jedihe →
Issue #3163339 by jedihe, ultimike, Nikhilesh Gupta, vacho, lostcarpark...
-
ultimike →
committed 6e4ffb75 on 2.1.x authored by
jedihe →
- Status changed to Fixed
12 months ago 7:04pm 1 December 2023 - 🇺🇸United States ultimike Florida, USA
Thanks to all for helping us get this across the finish line!
-mike
Automatically closed - issue fixed for 2 weeks with no activity.