Opened 9 years ago

Closed 9 years ago

Last modified 9 years ago

#3497 closed Bug (fixed)

Editor name not protected from bad chars

Reported by: notzippy Owned by: Tobiasz Cudnik
Priority: Normal Milestone: CKEditor 3.0
Component: General Version: 3.0 Beta 2
Keywords: Confirmed Review+ Cc:

Description

If editor.name="this.is.my.control" then plugin.js causes a javascript error

In plugin.js the following script is used:

Call the temporary function for the editing boostrap.

'window.parent.CKEDITOR._.contentDomReady' + editor.name + '( window );' +

...

Issue is if editor name contains a "." then script will fail - one way to fix this is :

'window.parent.CKEDITOR._[\'contentDomReady' + editor.name + '\']( window );' +

nz

Attachments (1)

3497.patch (543 bytes) - added by Tobiasz Cudnik 9 years ago.

Download all attachments as: .zip

Change History (9)

comment:1 Changed 9 years ago by Artur Formella

Keywords: Confirmed added; Escape editor name removed

comment:2 Changed 9 years ago by Tobiasz Cudnik

Owner: set to Tobiasz Cudnik
Status: newassigned

Changed 9 years ago by Tobiasz Cudnik

Attachment: 3497.patch added

comment:3 Changed 9 years ago by Tobiasz Cudnik

Keywords: Review? added

comment:4 Changed 9 years ago by Frederico Caldeira Knabben

Keywords: Review+ added; Review? removed

comment:5 Changed 9 years ago by Tobiasz Cudnik

Resolution: fixed
Status: assignedclosed

Fixed with [3489].

comment:6 Changed 9 years ago by Angelo Immediata

Hi. I tired to apply the patch to my ckeditor; but still i have the sam problem. I opened the file plugin.js located in ckeditor/plugins/wysiwygarea and i modified it. At beginning it was: window.parent.CKEDITOR._.contentDomReady'+c.name+'( window ); i modified it in this way: window.parent.CKEDITOR._\[\"contentDomReady' +c.name+'\"\]( window ); (i added the \ to avoid more wiki formatting) but i have agian the error. Must i do anything else? Thnks Angelo.

comment:7 Changed 9 years ago by Artur Formella

Yes. It should works. For sure please wait for official release.

comment:8 Changed 9 years ago by Angelo Immediata

Ok. I'll wait for the official release....may i know, if possible, when this release is scheduladed? Thanx Angelo.

Note: See TracTickets for help on using tickets.
© 2003 – 2017 CKSource – Frederico Knabben. All rights reserved. | Terms of use | Privacy policy