Welcome Guest, Not a member yet? Register   Sign In
set_value html_escape twice
#10

I just found what was going wrong using the debug mode !
The form_prep method has a fallback case when the field has already been prepped.
This case was preventing my values to be double encoded !
Now there is no more strange case like that (because it's not safe at all).

PHP Code:
// we've already prepped a field with this name
// @todo need to figure out a way to namespace this so
// that we know the *exact* field and not just one with
// the same name
if (isset($prepped_fields[$field_name]))
{
return 
$str;



So as you say either I change the framework's files which is bad. Either I change my 146 usage of set_value() ... I prefer not to panic people changing all the versioned files ... 
Reply


Messages In This Thread
set_value html_escape twice - by FnX - 08-04-2015, 03:22 AM
RE: set_value html_escape twice - by Avenirer - 08-05-2015, 06:18 AM
RE: set_value html_escape twice - by FnX - 08-05-2015, 11:30 AM
RE: set_value html_escape twice - by Avenirer - 08-05-2015, 12:25 PM
RE: set_value html_escape twice - by Avenirer - 08-05-2015, 12:29 PM
RE: set_value html_escape twice - by Narf - 08-05-2015, 12:53 PM
RE: set_value html_escape twice - by FnX - 08-06-2015, 01:59 AM
RE: set_value html_escape twice - by Narf - 08-06-2015, 02:42 AM
RE: set_value html_escape twice - by mwhitney - 08-06-2015, 06:34 AM
RE: set_value html_escape twice - by FnX - 08-09-2015, 05:47 PM



Theme © iAndrew 2016 - Forum software by © MyBB