Details
-
Bug
-
Resolution: Fixed
-
Low
Description
The milestone link in comments in issues isn't escaped properly. This causes the URL of a milestone to be invalid (non-working) if certain characters are used that should be url-encoded when using as a parameter.
Steps to reproduce:
- Create a milestone with the name "milestone; bug"
- Create issue, not linking to the milestone yet
- Edit the issue and set the milestone to "milestone; bug"
- A new comment will appear like "changed milestone to milestone; bug"
- Look at the URL insert in this comment, and notice that the ";" is not escaped to "%3B" in the 'milestone=' part.