search

textadventures / quest

Create text adventure games
http://textadventures.co.uk/quest
MIT License
304 stars 69 forks source link

Pasting HTML into WebEditor causes exception #1231

Open alexwarren opened 12 hours ago

alexwarren commented 12 hours ago

This error occurred on ActiveLit, and the user reports the game being corrupted afterwards.

It sounds like pasting HTML into an editor box causes issues:

Error in http://quest.activelit.com/Edit/SaveElement: A potentially dangerous Request.Form value was detected from the client (_additionalAction="...wset look;<!doctype html>
<ht...").
KVonGit commented 6 hours ago

This pasted into a room description causes no errors:

<!doctype html><html><body><b>Hello</b> world!</body></html>

image

Pasting <!doctype html> directly into code view only tells me an internal error occurred (as normal with <).

image

image

image

image

image

image

I can use it as an alias and everything works (although the link is the actual HTML code, haha).

image

image

image

image

image

image

I can't reproduce this. How'd they do that?

I couldn't even break it with this (just got the normal "internal error" message and everything reloaded and works):

image