InlineEditBox does not encode html entities

[guest]

Currently the InlineEditBox? does not encode html entities of the user's input.

As a reasult, typing "some text <p> some text" will actually insert a <p> to the document.

worse: typing "some text <some text" will result in a dom problem (?)

Patch (can not attach?)

--- InlineEditBox?.js 2006-06-12 10:29:37.000000000 +0200 +++ InlineEditBox?.js.1 2006-06-21 18:19:09.000000000 +0200 @@ -123,7 +123,9 @@

this.history.push(this.textValue); this.onSave(ee.value, this.textValue); this.textValue = ee.value;

• this.editable.innerHTML = this.textValue;

+ this.editable.innerHTML = ""; + var textNode = document.createTextNode( this.textValue ); + this.editable.appendChild( textNode );

}else{

this.doFade = false;

}

[bill]

Fixed in [4475]

[(none)]

Milestone 0.4 deleted