View Issue Details

This issue affects 1 person(s).
 4
IDProjectCategoryView StatusLast Update
20452Bug reportsPluginspublic2026-03-10 16:22
Reportermferraz Assigned To 
PrioritynoneSeverityminor 
Status newResolutionopen 
Product Version6.16.x 
Summary20452: After the last update, the link on the menu for the 2FA settings is breaking with the HTML
Description

After the last update, it seems that the link for the 2FA settings is breaking and presenting the "<i class='ri-lock-fill'> 2FA settings"

Steps To Reproduce

Update to the last version

TagsNo tags attached.
Attached Files
Bug heat4
Complete LimeSurvey version number (& build)6.16.12+260309
I will donate to the project if issue is resolvedNo
Browser
Database type & versionPostgreSQL
Server OS (if known)
Webserver software & version (if known)15+248+deb12u1
PHP VersionPHP 8.1

Users monitoring this issue

There are no users monitoring this issue.

Activities

tibor.pacalat

tibor.pacalat

2026-03-10 12:21

administrator   ~84432

What do you mean breaking? You mean it is not aligned properly?

mferraz

mferraz

2026-03-10 12:23

reporter   ~84433

Hi, thank you for your quick reply, is like is in the screenshot, it shows the HTML instead of interpreting.

image.png (15,186 bytes)   
image.png (15,186 bytes)   
tibor.pacalat

tibor.pacalat

2026-03-10 14:10

administrator   ~84435

Hmm, are you self hosting or you are on cloud? I checked on cloud and it looks good for me. Which browser?

mferraz

mferraz

2026-03-10 15:26

reporter   ~84436

It's self hosted. I've tried with Google Chrome and Mozilla Firefox.

Meanwhile I've found the problem, and a possible "fix":
$menuLabel = $menu->getLabel(); instead of $menuLabel = CHtml::encode($menu->getLabel()); on the application/libraries/MenuObjects/views/_extraMenu.php solved it

tibor.pacalat

tibor.pacalat

2026-03-10 16:16

administrator   ~84437

You are making a security threat for yourself that way.

mferraz

mferraz

2026-03-10 16:22

reporter   ~84438

I know, that's why it's on double quotes and it's not yet in production. I was just pointing for what made it work... It's something that probably needs to be figured out on the plugin itself. I just hope it's something that isn't breaking other plugins. That component is a little different from what it was on the previous version.

Issue History

Date Modified Username Field Change
2026-03-10 10:20 mferraz New Issue
2026-03-10 10:20 mferraz File Added: Captura de ecrã de 2026-03-10 09-17-40.png
2026-03-10 12:21 tibor.pacalat Note Added: 84432
2026-03-10 12:21 tibor.pacalat Bug heat 0 => 2
2026-03-10 12:23 mferraz Note Added: 84433
2026-03-10 12:23 mferraz File Added: image.png
2026-03-10 12:23 mferraz Bug heat 2 => 4
2026-03-10 14:10 tibor.pacalat Note Added: 84435
2026-03-10 15:26 mferraz Note Added: 84436
2026-03-10 16:16 tibor.pacalat Note Added: 84437
2026-03-10 16:22 mferraz Note Added: 84438