• 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
xss error on script tag

#1
[eluser]MaDe[/eluser]
I globally enabled xss filtering in my config
Code:
$config['global_xss_filtering'] = TRUE;
and submitted a form field with the following content:
Code:
alert('Test');
The following error occured:
Quote:Fatal error: Call to undefined function get_instance() in ***snip***\system\libraries\Input.php on line 855
I looked it up in the code and found the following lines, that produce the error:
Code:
$CI =& get_instance();
$charset = $CI->config->item('charset');
I was able to workaround by using
Code:
$CFG =& load_class('Config');
$this->charset = $CFG->item('charset');
As I don't know, why get_instance doesn't work (I found it in some other places, where it seems to work), I can't fix it in another way.

Is this a bug worth bug-tracking?

#2
[eluser]Derek Jones[/eluser]
Already is. Wink And is resolved in the svn.

#3
[eluser]MaDe[/eluser]
Thanks for the info. Didn't find it in the bug tracker :-S

Any info on when the next version will be released?

#4
[eluser]Derek Jones[/eluser]
No, I'm sorry I do not have a date; you may checkout the new Input.php file from the svn. As for not finding it in the bug tracker, if you didn't use the drop-downs, it was only searching titles for an exact phrase match. I'll modify the form so that by default it searches for "all words" in titles, entries, and comments.


Digg   Delicious   Reddit   Facebook   Twitter   StumbleUpon  


Users browsing this thread:
1 Guest(s)


  Theme © 2014 iAndrew  
Powered By MyBB, © 2002-2019 MyBB Group.