View Issue Details

This issue affects 1 person(s).
 6
IDProjectCategoryView StatusLast Update
20345Bug reportsImport/Exportpublic2025-11-12 18:18
ReporterMazi Assigned Toc_schmitz  
PrioritynoneSeverityblock 
Status closedResolutionno change required 
Product Version6.6.x 
Summary20345: LSS files with text labels containing "<" are not imported correctly and result in empty items
Description

At our survey a subquestion had this text:
<Ressources pour l’enseignement et

Exporting to LSS and importing at another system lead to an empty element at this question for this label. Probably the "<" character was not escaped properly and lead to a broken XML structure.

Steps To Reproduce

Steps to reproduce

Import the attached LSS file.
Open the French (FR) logic file.
Search for question "5-06. Les éléments d’information suivants" and check subquestions

Expected result

See all subquestions.

Actual result

SQ003 is empty though the LSS contains the correct label.

TagsNo tags attached.
Attached Files
lss-import.png (8,708 bytes)   
lss-import.png (8,708 bytes)   
image.png (38,351 bytes)   
image.png (38,351 bytes)   
Bug heat6
Complete LimeSurvey version number (& build)6.15.21
I will donate to the project if issue is resolvedNo
Browser
Database type & versionMySQL/MariaDB
Server OS (if known)
Webserver software & version (if known)
PHP Version8.x

Users monitoring this issue

There are no users monitoring this issue.

Activities

Mazi

Mazi

2025-11-11 21:39

updater   ~83740

@tibor.pacalat: I can safely reproduce this. Please assign to a developer, should be a simply fix. Thanks!

c_schmitz

c_schmitz

2025-11-12 00:11

administrator   ~83741

The XML structure is fine. The text is not saved properly in the LSS, probably because it was not properly saved in the original survey.
The character < needs to be quoted in HTML to work properly.
On import this looks like invalid HTML which is then removed most likely by the XSS fiter.

c_schmitz

c_schmitz

2025-11-12 00:20

administrator   ~83742

Not a bug.

DenisChenu

DenisChenu

2025-11-12 08:26

developer   ~83746

We must test the whole process as superadministrator and whole process as simple administrator

Mazi

Mazi

2025-11-12 08:57

updater   ~83749

@c_schmitz, I get your point. And though this doesn't seem to be an import issues, it is still an issue if "<" is not escaped properly when saving the question text. So I'd prefer to keep this open and adjust the issue description, because the issue is there!

c_schmitz

c_schmitz

2025-11-12 10:43

administrator   ~83750

The superadmin can import this just fine (I tested this) -for a normal admin this gets filtered.
So, this is exactly the way it should be.

@Mazi Please test properly before reporting an issue.

Mazi

Mazi

2025-11-12 10:48

updater   ~83751

@c_schmitz, I just double checked and impoorted the attached LSS file at version 6.15.21 with the main superadmin user set up when installing the system.
Filter HTML for XSS is OFF
Disable question script for XSS restricted user is OFF

When checking question with code q506 and the FR logic file I still do see the empty entry for SQ003 as shown at the provided screenshot.

c_schmitz

c_schmitz

2025-11-12 17:34

administrator   ~83759

The logic view does not show it since it is invalid HTML.
Check it out, it is imported properly. If you check the question in the question editor the (invalid) subquestion content is there.

Mazi

Mazi

2025-11-12 18:17

updater   ~83764

Last edited: 2025-11-12 18:18

c_schmitz, indeed - you are totally right. Will double check at the customer system.

Issue History

Date Modified Username Field Change
2025-11-11 21:38 Mazi New Issue
2025-11-11 21:38 Mazi File Added: lss-import.png
2025-11-11 21:38 Mazi File Added: image.png
2025-11-11 21:38 Mazi File Added: G-SHPPS (local MASTER) (111111)_29-OCT-25.lss
2025-11-11 21:39 Mazi Note Added: 83740
2025-11-11 21:39 Mazi Bug heat 0 => 2
2025-11-12 00:11 c_schmitz Note Added: 83741
2025-11-12 00:11 c_schmitz Bug heat 2 => 4
2025-11-12 00:20 c_schmitz Assigned To => c_schmitz
2025-11-12 00:20 c_schmitz Status new => closed
2025-11-12 00:20 c_schmitz Resolution open => no change required
2025-11-12 00:20 c_schmitz Note Added: 83742
2025-11-12 08:26 DenisChenu Note Added: 83746
2025-11-12 08:26 DenisChenu Bug heat 4 => 6
2025-11-12 08:57 Mazi Note Added: 83749
2025-11-12 10:43 c_schmitz Note Added: 83750
2025-11-12 10:48 Mazi Note Added: 83751
2025-11-12 17:34 c_schmitz Note Added: 83759
2025-11-12 18:17 Mazi Note Added: 83764
2025-11-12 18:18 Mazi Note Edited: 83764