Bug #39165

HTML content element html-decodes HTML entities

Added by Thomas Deinhamer 10 months ago. Updated 10 months ago.

Status:Accepted Start date:2012-07-21
Priority:Must have Due date:
Assignee:- % Done:

0%
Category:TCEforms
Target version:-
TYPO3 Version:4.6 Complexity:
PHP Version:5.3
Votes: 1 (View)

Description

When saving the HTML markup in an HTML content
element it HTML-decodes all HTML entities.

E.g. the following:

<script>alert("hello world");</script>

will be converted to:

<script>alert("hello world");</script>

and thus will be executed in the frontend
instead of printed out for demonstration.

History

#1
Updated by Ernesto Baschny 10 months ago

  • Status changed from New to Accepted
  • Target version deleted (4.7.3)
  • TYPO3 Version changed from 4.7 to 4.6

The bug seems to be in the backend editing form.

It doesn't happen in TYPO3 4.5, it started with 4.6:

On first save, it is properly saved to the database and also displayed as is in the frontend. As soon as you re-open the editing form in the backend, the entities are replaced with the less-than signs, and when you just save it back again: You have no more entities in the database.

Could you confirm that this is the bug in your situation (i.e. on first saving it works...)?

This is related to the introduction of the t3editor for HTML editing in 4.6. As soon as you uninstall t3editor, it works as expected.

#2
Updated by Thomas Deinhamer 10 months ago

Can confirm that it works on the first saving,
if reopened in the backend, it gets HTML-encoded.

Happens for me with TYPO3 4.7.1.

Also available in: Atom PDF