Hi all,
I believe the bug I'm having with Pligg 8.2 is that quotes within allowed HTML tags are not being escaped. This causes a problem when attempting to submit a story with quotes within <embed><object><param> tags like so:
Quote:
<a title="submit 'testing dance thing' to del.icio.us" href="http://del.icio.us/post" onclick="window.open('http://del.icio.us/post?v=4&noui&jump=close&url=http%3A%2 F%2Fwww.youtube.com%2Fwatch%3Fv%3Dt8RQqd9saDk& title=testing+dance+thing', 'del.icio.us','toolbar=no,width=700,height=400'); return false;"><img src="http://www.betterdance.com/templates/mollio-beat/images/delicious.png" border="0" alt="submit 'testing dance thing' to del.icio.us" /></a>
<a title="submit 'testing dance thing' to digg" href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fwww.youtube.co m%2Fwatch%3Fv%3Dt8RQqd9saDk&title=testing dance thing&bodytext=<object width="425"
|
Posting is fine when I just have quotes in the body of a story, with no HTML tags.
What's the best fix for this?