- Posts: 78
- Thank you received: 6
HTML not valid in custom fields
2 hours 50 minutes ago - 2 hours 26 minutes ago #100000314
by nico1979
HTML not valid in custom fields was created by nico1979
-- url of the page with the problem -- :
www.erboristeriazambrini.it
-- HikaShop version -- : 6.7.1
-- Joomla version -- : 6.2.0
-- PHP version -- : 8.4
-- Browser(s) name and version -- : All
Hi,
Before the upgrade from Hikashop 6.7.0 to 6.7.1 the front end correctly read the html from custom field Title value. After the upgrade it doesn't work and display the code in front end ( postimg.cc/McrHwkY2 ). I've got a lot of custom fields with html code like < img src="/images/bio.png" alt="bio" /> and now they don't work and in front-end is replaced with & lt ; img src="/images/bio.png" alt="bio" / & gt ; ( postimg.cc/7G0kWjsz ) are printed as htmlspecialchars. Can you help me? Thank you.
-- HikaShop version -- : 6.7.1
-- Joomla version -- : 6.2.0
-- PHP version -- : 8.4
-- Browser(s) name and version -- : All
Hi,
Before the upgrade from Hikashop 6.7.0 to 6.7.1 the front end correctly read the html from custom field Title value. After the upgrade it doesn't work and display the code in front end ( postimg.cc/McrHwkY2 ). I've got a lot of custom fields with html code like < img src="/images/bio.png" alt="bio" /> and now they don't work and in front-end is replaced with & lt ; img src="/images/bio.png" alt="bio" / & gt ; ( postimg.cc/7G0kWjsz ) are printed as htmlspecialchars. Can you help me? Thank you.
Last edit: 2 hours 26 minutes ago by nico1979.
Please Log in or Create an account to join the conversation.
1 hour 27 minutes ago #100000316
by nicolas
Replied by nicolas on topic HTML not valid in custom fields
Hello,
This is a side effect of a security change in HikaShop 6.7.1: the titles of the values of custom fields (radio buttons, checkboxes, dropdowns) are now escaped, so their HTML, such as your images, shows as code instead of being displayed. We have corrected it. The HTML of these titles is displayed again, with only potentially dangerous content (scripts, JavaScript events) removed. The correction is in. Download the install package on our website and install it on yours and it will fix the problem.
This is a side effect of a security change in HikaShop 6.7.1: the titles of the values of custom fields (radio buttons, checkboxes, dropdowns) are now escaped, so their HTML, such as your images, shows as code instead of being displayed. We have corrected it. The HTML of these titles is displayed again, with only potentially dangerous content (scripts, JavaScript events) removed. The correction is in. Download the install package on our website and install it on yours and it will fix the problem.
Please Log in or Create an account to join the conversation.
Time to create page: 0.131 seconds