[Fixed]Dedimania Records list has security / display bug

Location: Home Community Forums Deployed [Fixed]Dedimania Records list has security / display bug

Short Link: https://tm.mania-exchange.com/s/ft/2006

Page: 1 of 1

Post Reply 0 Observer

[Fixed]Dedimania Records list has security / display bug

Hi,

See this map where I am the dedimania record holder

the site should escape the html tag opening/closing symbols
in this case its only a display bug but some creative players could manipulate their nick to cause some defacing

screenshot here

Last edited by pfm,

pfm

Quad Bike Racer
Location:

Indeed they could. Thank you for the report!

This issue should be resolved in a future update.

Last edited by Forzyy,

Forzyy

Deep fried
Location:

Yeah if you check now the current record holder can even display an url in his nickname
http://tm.mania-exchange.com/tracks/view/40028

pfm

Quad Bike Racer
Location:

We don't have to worry about ManiaPlanet formatting because it's never rendered or parsed on the client side. Besides, a link won't hyperlink unless it's wrapped in an anchor tag.

Forzyy

Deep fried
Location:

This is now Fixed Thanks!

pfm

Quad Bike Racer
Location:

Page: 1 of 1 Post Reply