Fix for placeholder matching leading to unexpected replacements.
E.g.
%field_2052% %DataObject(user,{"method" : "getName"}); %DataObject(user,{"method" : "getFirstName"});
would be processed to:
MyFieldValue DataObject(user,{"method" : "getFirstName"});
Because the regexp currently matches:
%field_2052%
%DataObject(user,{"method" : "getName"}); %
Disallowing ; in the placeholder match should fix that while being more likely fully backward compatible than disallowing spaces or other chars.
I consider it unlikely that someone has a ; in a field name or in a somehow manually injected data entry.
solverat
commented
1 year ago
Fix for placeholder matching leading to unexpected replacements. E.g.
%field_2052% %DataObject(user,{"method" : "getName"}); %DataObject(user,{"method" : "getFirstName"});would be processed to:MyFieldValue DataObject(user,{"method" : "getFirstName"});Because the regexp currently matches:
Disallowing
;in the placeholder match should fix that while being more likely fully backward compatible than disallowing spaces or other chars. I consider it unlikely that someone has a;in a field name or in a somehow manually injected data entry.