TYPO3 Core

Can you try 6.2.21 please?

Still there with 6.2.21.

And sorry, it meant to read: ... replaced by the htmlentities & lt ; & gt ; & quot ; and & amp ;

The error ist the htmlspecialchars() in line 874 of typo3/sysext/rtehtmlarea/Classes/BrowseLinks.php. It escapes the whole <option>-Tag instead of the values inside.

See:

https://github.com/TYPO3/TYPO3.CMS/commit/c6dcf831ad123ca9c61d12c910667106a6abf031#diff-bc64991b759f02cd03e4afc23434af72R874

Thanks Alexander for digging. Can you push a patch, so your name shows up as author?

diff -ur typo3_src-6.2.21-orig/typo3/sysext/rtehtmlarea/Classes/BrowseLinks.php typo3_src-6.2.21/typo3/sysext/rtehtmlarea/Classes/BrowseLinks.php
--- typo3_src-6.2.21-orig/typo3/sysext/rtehtmlarea/Classes/BrowseLinks.php    2016-04-12 13:11:14.000000000 +0200
+++ typo3_src-6.2.21/typo3/sysext/rtehtmlarea/Classes/BrowseLinks.php    2016-04-13 10:50:00.862585559 +0200
@@ -871,7 +871,7 @@
                             <td><label>' . $GLOBALS['LANG']->getLL('anchor_class', TRUE) . ':</label></td>
                             <td colspan="3">
                                 <select name="anchor_class" onchange="' . htmlspecialchars($this->getClassOnChangeJS()) . '">
-                                    ' . htmlspecialchars($this->classesAnchorJSOptions[$this->act]) . '
+                                    ' . $this->classesAnchorJSOptions[$this->act] . '
                                 </select>
                             </td>
                         </tr>';

htmlspecialchars() is applied to classesAnchorJSOptions in line 238 for all relevant data.

First: the patch fixes the Dropdown.

However, in the onchange event handler in the select field for the style (<select name="anchor_class" ...) the && are still escaped as & amp ;& amp ; - probably the browsers do not care, but who knows. If now I remove the htmlspecialchars() in the line above the pached one (also introduced with 6.2.20)

typo3_src-6.2.21/typo3/sysext/rtehtmlarea/Classes/BrowseLinks.php:873
<select name="anchor_class" onchange="' . htmlspecialchars($this->getClassOnChangeJS()) . '">)

// Reset target to default if field is not displayed and class has no configured target
document.ltargetform.ltarget.value = "";

Unfortunately I have no time at the moment to look into that further. :(

Edit: translated. Sorry.

Please post in english here.

Patch set 2 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/47641