#1452 [Opn->Csd]: Htmlentities in PEPr proposal (vote comments)

Edit report at: http://pear.php.net/bugs/bug.php?id=1452&edit=1 ID: 1452 Updated by: toby@php.net Reported By: bmansion at mamasam dot com -Status: Open +Status: Closed Package: Web Site PHP Version: Irrelevant New Comment: This bug has been fixed in CVS. In case this was a documentation problem, the fix will show up at the end of next Sunday (CET) on pear.php.net. In case this was a pear.php.net website problem, the change will show up on the website in short time. Thank you for the report, and for helping us make PEAR better. Previous Comments: ------------------------------------------------------------------------ [2004-05-20 08:10:36] bmansion at mamasam dot com Description: ------------ Once again, there is a problem with htmlentities not being used in PEPr. This makes us at the mercy of a script kiddie using cross-side scripting (woooow, scary !) Reproduce code: --------------- http://pear.php.net/pepr/pepr-vote-show.php?id=72&handle=mansion ------------------------------------------------------------------------ -- Edit this bug report at http://pear.php.net/bugs/bug.php?id=1452&edit=1