HTML Entities in a link text: &lang=de => 〈=de

[dos@…]

The editor does not correctly handle strings like &lang=de. This string will be converted into 〈=de during loading.

Maybe the editor converts & to simple &, resulting &lang=de, and then the editor will handle this as as an entity like ⟨=de and then converts it into an UTF8 code 〈.

I found it while i tried to save a link with url params in the text. In the href section it is handled correctly, but not in text section of an A-Tag: <a href="domain.com?param=1&amp;lang=de">domain.com?param=1&#9001=de</a>

I think the editor does not correctly check, if this is really a HTML-Entity, cause really entities have a trailing ";".

An update did not resolve this bug.

[Alfonso Martínez de Lizarrondo]

What are the steps to reproduce? Does this affect all browsers?

I've tried to load <p><a href="domain.com?param=1&amp;lang=de">domain.com?param=1&amp;lang=de</a></p> and switching to design and back to source again didn't change anything.

[Artur Formella]

In FF:

1.Go to ​http://www.fckeditor.net/demo

2.Load source

<p><a href="domain.com?param=1&lang=de">domain.com?param=1&lang=de</a></p>

3.Switch to WYSIWYG. A-content is changed.

4.Switch back to source

<p><a href="domain.com?param=1&amp;lang=de">domain.com?param=1&lang;=de</a></p>

[Alfonso Martínez de Lizarrondo]

But that doesn't match the original report.

<p><a href="domain.com?param=1&lang=de">domain.com?param=1&lang=de</a></p> is invalid HTML, as a human you can know that in that situation the & really means & but the browsers usually try to parse it as ⟨

When invalid input is provided, the output can be anything, so this bug would be invalid in that situation.

[dos@…]

i'm sorry... here are my steps:

1. i typed:

<p><a href="http://domain.com/index.php?param=1&amp;lang=de">http://domain.com/index.php?param=1&amp;lang=de</a></p>

2. save it! <<<<

3. now its changed to:

<p><a href="http://domain.com/index.php?param=1&amp;lang=de">http://domain.com/index.php?param=1〈=de</a></p>

the code after param=1 is the ⟨

[Alfonso Martínez de Lizarrondo]

If the problem only happens when you save the data and then reload back it can be a problem with your server scripts. If you can reproduce it just switching between design and source view without saving then it's something done inside FCKeditor.

Can you verify that the data is saved correctly, and when you edit again, in the source the correct &lang; does exist?

[dos@…]

after saving, the content of the file is correct.

this happens when the file will be reloaded _after_ saving.

and:

When i type in the code &lang=de in sourcecode view and switch back to htmlview this will happen too.

[Alfonso Martínez de Lizarrondo]

Replying to dos@pixelbrand.net:

after saving, the content of the file is correct.

this happens when the file will be reloaded _after_ saving.

Can you verify that the code provided to FCKeditor is the correct and hasn't been modified by your script?

I've tested to initialize it with

oFCKeditor.Value = '<p><a href="domain.com?param=1&amp;lang=de">domain.com?param=1&amp;lang=de</a></p>' ;

and it works fine

When i type in the code &lang=de in sourcecode view and switch back to htmlview this will happen too.

As I said previously, that's invalid HTML, so anything can happen in that situation.

[Alfonso Martínez de Lizarrondo]

expired