Skip to main content

HTML not valid in custom fields

More
2 hours 50 minutes ago - 2 hours 26 minutes ago #100000314 by nico1979
-- url of the page with the problem -- : www.erboristeriazambrini.it
-- HikaShop version -- : 6.7.1
-- Joomla version -- : 6.2.0
-- PHP version -- : 8.4
-- Browser(s) name and version -- :  All

Hi,
Before the upgrade from Hikashop 6.7.0 to 6.7.1 the front end correctly read the html from custom field Title value. After the upgrade it doesn't work and display the code in front end ( postimg.cc/McrHwkY2 ). I've got a lot of custom fields with html code like < img src="/images/bio.png" alt="bio" /> and now they don't work and in front-end is replaced with  & lt ; img src="/images/bio.png" alt="bio" / & gt ;  ( postimg.cc/7G0kWjsz ) are printed as htmlspecialchars. Can you help me? Thank you.
Last edit: 2 hours 26 minutes ago by nico1979.

Please Log in or Create an account to join the conversation.

More
1 hour 27 minutes ago #100000316 by nicolas
Hello,

This is a side effect of a security change in HikaShop 6.7.1: the titles of the values of custom fields (radio buttons, checkboxes, dropdowns) are now escaped, so their HTML, such as your images, shows as code instead of being displayed. We have corrected it. The HTML of these titles is displayed again, with only potentially dangerous content (scripts, JavaScript events) removed. The correction is in. Download the install package on our website and install it on yours and it will fix the problem.

Please Log in or Create an account to join the conversation.

Time to create page: 0.131 seconds
Powered by Kunena Forum