[Fixed]Dedimania Records list has security / display bug

Location: Home Community Forums Deployed [Fixed]Dedimania Records list has security / display bug

Short Link: https://tm.mania-exchange.com/s/ft/2006

Page: 1 of 1

Post Reply 0 Observer

[Fixed]Dedimania Records list has security / display bug 2013-06-05 03:16:54

Hi,

See this map where I am the dedimania record holder

the site should escape the html tag opening/closing symbols
in this case its only a display bug but some creative players could manipulate their nick to cause some defacing

screenshot here

Last edited by pfm, 2013-07-24 16:46:00

pfm

Quad Bike Racer
Location:

2013-06-05 03:39:05

Indeed they could. Thank you for the report!

This issue should be resolved in a future update.

Last edited by Forzyy, 2013-06-05 04:34:03

Forzyy

Deep fried
Location:

2013-06-06 17:57:45

Yeah if you check now the current record holder can even display an url in his nickname
http://tm.mania-exchange.com/tracks/view/40028

pfm

Quad Bike Racer
Location:

2013-06-07 01:17:23

We don't have to worry about ManiaPlanet formatting because it's never rendered or parsed on the client side. Besides, a link won't hyperlink unless it's wrapped in an anchor tag.

Forzyy

Deep fried
Location:

2013-07-24 16:45:41

This is now Fixed Thanks!

pfm

Quad Bike Racer
Location:

Page: 1 of 1 Post Reply