Incorrect HTML escaping for keywords with special characters

Summary / Zusammenfassung

When creating or saving keywords in the administration area, there is faulty HTML escaping whenever the character < (less than) is used in the text. This causes not only the < but also other special characters and umlauts (such as ä, ²) to be converted into their HTML entities.

Steps to Reproduce / Schritte zur Reproduktion

  1. Admin area > Keywords
  2. Create and save new keyword with #B1#B1012#imFreien#Freifläche klein (< 100 m²) and save
  3. Keyword is saved and displayed as HTML-escaped

Expected Behavior / Erwartetes Verhalten

Special characters / umlauts should always be displayed and not rendered as HTML entities.

Keyword is displayed as #B1#B1012#imFreien#Freifläche klein (< 100 m²).

Actual Behavior / Tatsächliches Verhalten

When < is present, the keyword is converted, resulting in #B1#B1012#imFreien#Freifl&#228;che klein (&#lt; 100 m&#178;)

Impact on Usage / Auswirkung auf die Nutzung

Minor: Small / cosmetic impact. / Kleiner / kosmetischer Einfluss.
Moderate: It disrupts some workflows. / Beeinträchtigt einige Arbeitsabläufe.
Critical: I can’t use the platform at all. / Die Plattform ist nicht nutzbar.

Screenshots or Logs / Screenshots oder Protokolle

image

image

image

2 Likes

Incorrect HTML escaping of keywords with '<' and special characters in the admin area [SIMD4-682]

:united_states: The team is reviewing the issue based on provided information and will prioritize it next.
:germany: Das Team prüft das Problem anhand der Angaben und wird es anschließend priorisieren.

Update: duplicate

:united_states: This issue duplicates an existing report.
:germany: Dieses Problem wurde bereits gemeldet.

Update: duplicate

:united_states: This issue duplicates an existing report.
:germany: Dieses Problem wurde bereits gemeldet.