- changed status to open
Unescaped player names in players table
Issue #19
resolved
I was trying to dismiss a player whose name contains an apostrophe, and discovered that it breaks the Javascript click handler.
This is the code in the page, where the name should be escaped
<span [...] onclick="dismiss_player_prompt( 225, 'Monpo L'Illandese', 1 ); return false;" [...] >
Dismiss
</span>
Comments (3)
-
-
-
assigned issue to
-
assigned issue to
-
- changed status to resolved
Created [512]⦿ for user:14[dreadnaut], with comment [Issue
#19]. - Log in to comment