View Issue Details

This bug affects 1 person(s).
 6
IDProjectCategoryView StatusLast Update
12639Bug reportsSurvey editingpublic2018-05-30 18:08
Reporteruser14106Assigned ToLouisGac 
PrioritynoneSeverityminor 
Status closedResolutionfixed 
Product Version2.67.x 
Summary12639: Quota end-url does not allow surrounding EM
Description

Due to URL validation the end-url can not be surrounded by EM eg:

if(condition,"http://example.com",,"http://google.com")

TagsNo tags attached.
Bug heat6
Complete LimeSurvey version number (& build)2.67.1
I will donate to the project if issue is resolvedNo
Browser
Database type & versionn/r
Server OS (if known)n/r
Webserver software & version (if known)n/r
PHP Versionn/r

Users monitoring this issue

There are no users monitoring this issue.

Activities

user14106

2017-08-30 12:11

  ~44388

https://github.com/LimeSurvey/LimeSurvey/pull/798

DenisChenu

DenisChenu

2017-08-30 13:21

developer   ~44389

With 2.6lts : i use {QuestionCodeForQuotaUrl} , then must be fixed.
Before seem to use https://github.com/TonisOrmisson/LimeSurvey/commit/bd86ccfd2884e7acb439fe2e425fdbf824a1e126#diff-f9dd264368810c6303206b6b095991cfR77 array('quotals_url','LSYii_Validators','isUrl'=>true),

I think it's allow using EM but disable some XSS from survey admin :)

LouisGac

LouisGac

2017-10-09 11:54

developer   ~44552

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=24014

Related Changesets

LimeSurvey: master 8726d3da

2017-10-09 11:54:24

TonisOrmisson


Committer: LouisGac Details Diff
Fixed issue 12639: Quota end-url does not allow surrounding EM (#798) Affected Issues
12639
mod - application/models/QuotaLanguageSetting.php Diff File

Issue History

Date Modified Username Field Change
2017-08-30 12:01 user14106 New Issue
2017-08-30 12:01 user14106 Status new => assigned
2017-08-30 12:01 user14106 Assigned To => user14106
2017-08-30 12:11 user14106 Status assigned => confirmed
2017-08-30 12:11 user14106 Note Added: 44388
2017-08-30 13:21 DenisChenu Note Added: 44389
2017-10-09 11:54 LouisGac Changeset attached => LimeSurvey master 8726d3da
2017-10-09 11:54 LouisGac Note Added: 44552
2017-10-09 11:54 LouisGac Assigned To user14106 => LouisGac
2017-10-09 11:54 LouisGac Resolution open => fixed
2018-05-30 18:08 LouisGac Status confirmed => resolved
2018-05-30 18:08 LouisGac Status resolved => closed
2019-11-01 17:25 c_schmitz Category Survey design => Survey editing