Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 609 of 807  Not logged in ELOG logo
ID Date Icon Author Author Email Categorydown OS ELOG Version Subject
  956   Tue Feb 22 10:35:17 2005 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.5.7Re: Space in logbook name with password list results in "List" menu acting strange
> If you have a space in a logbook name and you enable password list, then 
> the "List" menu option forces you to the login page each time.
> The URL says "aaa+bbb", but when you do not have passwords enabled, the 
> URL is "aaa bbb"

Thanks for reporting this. I fixed it in the current CVS version.
  958   Wed Feb 23 18:07:24 2005 Entry Emiliano GabrielliAlberT@SuperAlberT.itBug reportAllr1.571boundary problem with Type lists display
using:
Display mode = threaded
List display = Subject, Type, Author, Date

in the config file (omitting "ID" then) rise the bug

ie, an unneeded "," is displayed after the "supposed to be printed" ID
  960   Thu Feb 24 11:23:44 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itBug reportAll2.5.6Re: HTML 4.1 transitional validation fails
> > as this url shows http://www.htmlhelp.com/tools/validator/problems.html#amp
> 
> > it should be used an HTML entity instead of the ampersand sign.<p> > > Can you please be a bit more specific? In which URL should the ampersand be > replaced? uhmm... http://midas.psi.ch/elogs/Forum/page2?mode=threaded&expand=0&last=7 the bug is also a "documentation bug", infact similar tricks are also in FAQs (FAQ 5 for example) I tried to substitute avery occurrence of hard coded "&" with "&amp;" but it does not do the job at all ... infact the first time the HTML code is ok, but following a link let the browser to automatically decode html entities .. and everything turns wrong again ... maybe the encoding should be done in printing-to-the-browser-time ..
  961   Thu Feb 24 12:44:29 2005 Warning Emiliano GabrielliAlberT@SuperAlberT.itBug reportAll2.5.6Re: HTML 4.1 transitional validation fails
> > > as this url shows http://www.htmlhelp.com/tools/validator/problems.html#amp
> > 
> > > it should be used an HTML entity instead of the ampersand sign.<p> > > > > Can you please be a bit more specific? In which URL should the ampersand be > > replaced? > > uhmm... > > http://midas.psi.ch/elogs/Forum/page2?mode=threaded&expand=0&last=7 > > the bug is also a "documentation bug", infact similar tricks are also > in FAQs (FAQ 5 for example) > > I tried to substitute avery occurrence of hard coded "&" with "&amp;" but it does > not do the job at all ... infact the first time the HTML code is ok, but > following a link let the browser to automatically decode html entities .. and > everything turns wrong again ... maybe the encoding should be done in > printing-to-the-browser-time .. BTW, the current url (taht should be perfectly well formed makes the elog not to display attachments ... so may be thare is a problema in the query string decoding routine ... http://somehost.it:8080/LBNAME/?mode=full&amp;attach=1
  962   Thu Feb 24 12:45:02 2005 Warning Emiliano GabrielliAlberT@SuperAlberT.itBug reportAllr. 1.571Re: HTML 4.1 transitional validation fails
> > > as this url shows http://www.htmlhelp.com/tools/validator/problems.html#amp
> > 
> > > it should be used an HTML entity instead of the ampersand sign.<p> > > > > Can you please be a bit more specific? In which URL should the ampersand be > > replaced? > > uhmm... > > http://midas.psi.ch/elogs/Forum/page2?mode=threaded&expand=0&last=7 > > the bug is also a "documentation bug", infact similar tricks are also > in FAQs (FAQ 5 for example) > > I tried to substitute avery occurrence of hard coded "&" with "&amp;" but it does > not do the job at all ... infact the first time the HTML code is ok, but > following a link let the browser to automatically decode html entities .. and > everything turns wrong again ... maybe the encoding should be done in > printing-to-the-browser-time .. BTW, the current url (taht should be perfectly well formed makes the elog not to display attachments ... so may be thare is a problema in the query string decoding routine ... http://somehost.it:8080/LBNAME/?mode=full&amp;attach=1
  967   Wed Mar 2 15:19:56 2005 Reply Stefan Rittstefan.ritt@psi.chBug reportAllr1.571Re: boundary problem with Type lists display
> using:
> Display mode = threaded
> List display = Subject, Type, Author, Date
> 
> in the config file (omitting "ID" then) rise the bug
> 
> ie, an unneeded "," is displayed after the "supposed to be printed" ID

Fixed in CVS revision 1.574
  968   Wed Mar 2 17:31:33 2005 Reply Stefan Rittstefan.ritt@psi.chBug reportAllr. 1.571Re: HTML 4.1 transitional validation fails
> > I tried to substitute avery occurrence of hard coded "&" with "&amp;" but it does
> > not do the job at all ... infact the first time the HTML code is ok, but
> > following a link let the browser to automatically decode html entities .. and
> > everything turns wrong again ... maybe the encoding should be done in
> > printing-to-the-browser-time ..

That won't help, since the 'Start page = ...' string is used for redirection (outside
of any HTML). The '&amp;' thing should only occur inside the HMTL text.

I changed elogd.c to encode things properly, but I'm not sure if I covered all
occurences. Can you try release 1.576 if it works correctly?
  974   Mon Mar 7 16:05:22 2005 Entry Emiliano GabrielliAlberT@SuperAlberT.itBug reportAllrev. 1.51Display <attribute> do erroneously encoded
Display subject = <b>$subject</b>

is printed to the browser encoded, so that it is diplayed as is..
ELOG V3.1.5-3fb85fa6