View Issue Details

This bug affects 1 person(s).
 4
IDProjectCategoryView StatusLast Update
16658Bug reportsPrint Viewpublic2020-10-05 08:34
Reporterfajardas Assigned Togabrieljenik  
PrioritynormalSeveritypartial_block 
Status closedResolutionfixed 
Product Version4.3.15 
Summary16658: queXMLPDF export shows JS script
Description

The queXMLPDF export shows the embedded JS script at the exported file.

TagsNo tags attached.
Attached Files
Capture.png (40,436 bytes)   
Capture.png (40,436 bytes)   
Capture2.png (56,323 bytes)   
Capture2.png (56,323 bytes)   
test-866869-queXML.pdf (30,574 bytes)
Bug heat4
Complete LimeSurvey version number (& build)4.3.15+200907
I will donate to the project if issue is resolvedNo
Browser
Database type & versionMySQL Community - 8.0.18
Server OS (if known)
Webserver software & version (if known)
PHP Version7.3.13

Users monitoring this issue

There are no users monitoring this issue.

Activities

gabrieljenik

gabrieljenik

2020-09-21 22:31

manager   ~59913

Same should happen with LSv3.
Will apply patch on that branch after

gabrieljenik

gabrieljenik

2020-09-22 16:35

manager   ~59929

Updated QueXMLCleanup. Replaced "strip_tags" by CHtmlPurifier. strip_tags removed the tags but kept their inner content (the javascript in this case).
PR: https://github.com/LimeSurvey/LimeSurvey/pull/1601

gabrieljenik

gabrieljenik

2020-10-01 14:29

manager   ~60017

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=30528

lime_release_bot

lime_release_bot

2020-10-05 08:34

administrator   ~60063

Fixed in Release 4.3.19+201005

Related Changesets

LimeSurvey: master fec817cc

2020-10-01 14:29:25

gabrieljenik


Committer: GitHub Details Diff
Fixed issue 16658: queXMLPDF export shows JS script (#1601)

Updated QueXMLCleanup. Replaced "strip_tags" by CHtmlPurifier. strip_tags removed the tags but kept their inner content (the javascript in this case).
Affected Issues
16658
mod - application/helpers/export_helper.php Diff File

Issue History

Date Modified Username Field Change
2020-09-10 16:50 fajardas New Issue
2020-09-10 16:50 fajardas File Added: limesurvey_survey_866869.lss
2020-09-10 16:50 fajardas File Added: Capture.png
2020-09-10 16:50 fajardas File Added: Capture2.png
2020-09-10 16:50 fajardas File Added: test-866869-queXML.pdf
2020-09-15 15:10 cdorin Priority none => normal
2020-09-15 15:10 cdorin Severity minor => partial_block
2020-09-15 15:10 cdorin Status new => confirmed
2020-09-15 15:10 cdorin Zoho Sprints => |Yes|
2020-09-21 22:31 gabrieljenik Note Added: 59913
2020-09-22 16:35 gabrieljenik Note Added: 59929
2020-10-01 14:29 gabrieljenik Changeset attached => LimeSurvey master fec817cc
2020-10-01 14:29 gabrieljenik Note Added: 60017
2020-10-01 14:29 gabrieljenik Assigned To => gabrieljenik
2020-10-01 14:29 gabrieljenik Resolution open => fixed
2020-10-05 08:34 lime_release_bot Zoho Sprints Yes => |Yes|
2020-10-05 08:34 lime_release_bot Note Added: 60063
2020-10-05 08:34 lime_release_bot Status confirmed => closed