Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon5.gif   HTML in attribute values, posted by soren poulsen on Thu Aug 6 11:40:11 2009 
    icon2.gif   Re: HTML in attribute values, posted by soren poulsen on Thu Aug 6 11:53:29 2009 
       icon2.gif   Re: HTML in attribute values, posted by Stefan Ritt on Thu Aug 6 12:11:50 2009 
          icon2.gif   Re: HTML in attribute values, posted by soren poulsen on Thu Aug 6 13:09:50 2009 
Message ID: 66498     Entry time: Thu Aug 6 12:11:50 2009     In reply to: 66497     Reply to this: 66499
Icon: Reply  Author: Stefan Ritt  Author Email: stefan.ritt@psi.ch 
Category: Bug report  OS: Linux  ELOG Version: 2.7.7 
Subject: Re: HTML in attribute values 

soren poulsen wrote:

soren poulsen wrote:

Hi,

I am using syntax like (from the doc):

Display Telephone = <a href="http://any.company.com/telbook.cgi?search=$Name">$Name's telephone number</a>

Until yesterday this was interpreted as HTML.

After upgrading to 2.7.7, I still get a valid link but the full HTML code is also displayed: the user sees
''<a href="http://any.company.com/telbook.cgi?search=myname">myname's telephone number</a>''
where he should only see:
''myname's telephone number''

I am 99% sure this is a consequence of the upgrade. Is there a way to get the original behaviour back?
Thanks a lot
Soren Poulsen




 I have more precise information about the nature of this issue, which concerns the display of E-logs

In the previous version 2.7.6, E-log would generate HTML like this:

td class="attribvalue">
<a href="https://edms.cern.ch/camms/plsql/d7i_report_CV_WO_VIEW.form_7?event=15403690&button=Search">15403690</a>&nbsp;</td>

In the latest version 2.7.7, E-log generates HTML like this (for the same attribute):

<td class="attribvalue">
&lt;a href="<a href="https://edms.cern.ch/camms/plsql/d7i_report_CV_WO_VIEW.form_7?event=15575045&amp;button=Search">https://edms.cern.ch/camms/plsql/d7i_report_CV_WO_VIEW.form_7?event=15575045&amp;button=Search</a>"&gt;15575045&lt;/a&gt;&nbsp;</td>

You need

Allow HTML = 1

in your configuration file. See the documentation for details. This featue is new in 2.7.7.

ELOG V3.1.5-3fb85fa6