less-than sign (<) not possible as part of value in custom fields

RustyHika
Topic Author
Offline

5 years 7 months ago - 5 years 7 months ago #328785 by RustyHika

less-than sign (<) not possible as part of value in custom fields was created by RustyHika

-- HikaShop version -- : 4.4.0
-- Joomla version -- : 3.9.24
-- PHP version -- : 7.4
-- Browser(s) name and version -- : FF 84.0.2
-- Error-message(debug-mod must be tuned on) -- : Not applicable

Hi,

Trying to use the less-than sign (< or

Code:

&lt;

) as part of a value of a custom field. It doesn't work while the greater-than sign (>) does. See screenshot. What to do about this?

Cheers,
Remco

Last edit: 5 years 7 months ago by RustyHika.

Please Log in or Create an account to join the conversation.

nicolas
Offline

5 years 7 months ago #328797 by nicolas

Replied by nicolas on topic less-than sign (<) not possible as part of value in custom fields

Hi,

Thank you for your feedback.
I found the issue is related to Joomla's filtering for security.
Change the code:

Code:

$field->field_value[] = $safeHtmlFilter->clean($title,'string'). '::' .  $safeHtmlFilter->clean($value,'string') . '::' .  $safeHtmlFilter->clean($disabled,'string');

to:

Code:

$field->field_value[] = $safeHtmlFilter->clean($title,'raw'). '::' .  $safeHtmlFilter->clean($value,'raw') . '::' .  $safeHtmlFilter->clean($disabled,'string');

in the file administrator/components/com_hikashop/classes/field.php and it will fix the problem.

Please Log in or Create an account to join the conversation.

RustyHika
Topic Author
Offline

5 years 7 months ago #328950 by RustyHika

Replied by RustyHika on topic less-than sign (<) not possible as part of value in custom fields

Hi Nicolas,

Should I make an override or will this be fixed in the following update?

Cheers,
Remco

Please Log in or Create an account to join the conversation.

nicolas
Offline

5 years 7 months ago #328951 by nicolas

Replied by nicolas on topic less-than sign (<) not possible as part of value in custom fields

Hi,

You can directly modify the file.
This will be included in the next version so no worries for future updates.

Please Log in or Create an account to join the conversation.

Time to create page: 0.160 seconds