Web UI bug: Displaying HTML on page

Found this on the Setting page (Safari):
CleanShot 2022-12-28 at 11.27.11

Notice how the HTML for creating a link is being displayed, rather than providing a clickable link for “similar homes”. This is happening because the actual code uses &lt; and &gt; instead of < and > in the page code.

This is, no doubt, the result of a piece of code that is sanitizing text from a file or database, before being inserted in a page. This is, generally, a good security measure, but clearly accommodations need to be made where HTML is intended to get through, or, even better, a special kind of format should be allowed in the stored text that, upon transformation and filtering will produce valid HTML for the link, but still strip unwanted HTML.

2 Likes

Hi Dolf,

I have identified this bug and reported it. I will let you know when I can confirm it has been resolved.

Thanks again for your help!

2 Likes