Skip to content

Conversation

jaragunde
Copy link
Member

We need to use json_encode to properly escape user-entered names in generated JS code, which might contain special characters.

This is the same problem we fixed already for other pages. I hadn't realized it affected the project evaluation report too, which we use less often.

Fixes #564.

We need to use json_encode to properly escape user-entered names in
generated JS code, which might contain special characters.
@jaragunde jaragunde requested a review from anarute April 8, 2022 07:58
Copy link
Member

@anarute anarute left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jaragunde jaragunde merged commit a4bf9d4 into main Apr 19, 2022
@jaragunde jaragunde deleted the fix-project-evaluation branch April 19, 2022 07:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Unescaped area name can break users page
2 participants