HTML Special Entities Leaking

humhub / translation

Internal translation tool

https://translate.humhub.org

Apache License 2.0

17 stars 15 forks source link

HTML Special Entities Leaking #28

Closed ArchBlood closed 4 years ago

ArchBlood commented 4 years ago

Screenshot_3

buddh4 commented 4 years ago

Its defined like this in code:

 'loginFilter' => Yii::t('LdapModule.base', 'Defines the filter to apply, when login is attempted. %s replaces the username in the login action. Example: &quot;(sAMAccountName=%s)&quot; or &quot;(uid=%s)&quot;'),

Is is actually leaking in ldap configuration in the backend?

ArchBlood commented 4 years ago

I completely forgot what I reported here :thinking:

buddh4 commented 4 years ago

I think you thought the translation module produced those encoded texts, but the original translation contains those entities, so its not an issue with the translation module. This is not a bug, but unfortunately it gets a bit harder to translate like this, but we'd need to change the original message.