View Issue Details

Related ChangesetsJump to NotesJump to History
This bug affects 1 person(s).
 4
IDProjectCategoryView StatusDate SubmittedLast Update
16658Bug reportsPrint Viewpublic2020-09-10 16:502020-10-05 08:34
Reporterfajardas Assigned Togabrieljenik  
PrioritynormalSeveritypartial_block 
Status closedResolutionfixed 
Product Version4.3.15 
Summary16658: queXMLPDF export shows JS script
Description

The queXMLPDF export shows the embedded JS script at the exported file.

TagsNo tags attached.
Attached Files
limesurvey_survey_866869.lss (29,110 bytes)
Capture.png (40,436 bytes)   
Capture.png (40,436 bytes)   
Capture2.png (56,323 bytes)   
Capture2.png (56,323 bytes)   
test-866869-queXML.pdf (30,574 bytes)
Bug heat4
Complete LimeSurvey version number (& build)4.3.15+200907
I will donate to the project if issue is resolvedNo
Browser
Database type & versionMySQL Community - 8.0.18
Server OS (if known)
Webserver software & version (if known)
PHP Version7.3.13

Users monitoring this issue

There are no users monitoring this issue.

Activities

gabrieljenik

gabrieljenik

2020-09-21 22:31

manager   ~59913

Same should happen with LSv3.
Will apply patch on that branch after
gabrieljenik

gabrieljenik

2020-09-22 16:35

manager   ~59929

Updated QueXMLCleanup. Replaced "strip_tags" by CHtmlPurifier. strip_tags removed the tags but kept their inner content (the javascript in this case).
PR: https://github.com/LimeSurvey/LimeSurvey/pull/1601
gabrieljenik

gabrieljenik

2020-10-01 14:29

manager   ~60017

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=30528
lime_release_bot

lime_release_bot

2020-10-05 08:34

administrator   ~60063

Fixed in Release 4.3.19+201005

Related Changesets

LimeSurvey: master fec817cc

2020-10-01 16:29

gabrieljenik

Committer: GitHub


Details Diff		 Fixed issue 16658: queXMLPDF export shows JS script (#1601)

Updated QueXMLCleanup. Replaced "strip_tags" by CHtmlPurifier. strip_tags removed the tags but kept their inner content (the javascript in this case).		 Affected Issues
16658
mod - application/helpers/export_helper.php Diff File

Issue History

Date Modified Username Field Change
2020-09-10 16:50 fajardas New Issue
2020-09-10 16:50 fajardas File Added: limesurvey_survey_866869.lss
2020-09-10 16:50 fajardas File Added: Capture.png
2020-09-10 16:50 fajardas File Added: Capture2.png
2020-09-10 16:50 fajardas File Added: test-866869-queXML.pdf
2020-09-15 15:10 cdorin Priority none => normal
2020-09-15 15:10 cdorin Severity minor => partial_block
2020-09-15 15:10 cdorin Status new => confirmed
2020-09-15 15:10 cdorin Zoho Sprints => |Yes|
2020-09-21 22:31 gabrieljenik Note Added: 59913
2020-09-22 16:35 gabrieljenik Note Added: 59929
2020-10-01 14:29 gabrieljenik Changeset attached => LimeSurvey master fec817cc
2020-10-01 14:29 gabrieljenik Note Added: 60017
2020-10-01 14:29 gabrieljenik Assigned To => gabrieljenik
2020-10-01 14:29 gabrieljenik Resolution open => fixed
2020-10-05 08:34 lime_release_bot Zoho Sprints Yes => |Yes|
2020-10-05 08:34 lime_release_bot Note Added: 60063
2020-10-05 08:34 lime_release_bot Status confirmed => closed