PKP Bugzilla – Bug 6259
User interests stored in database urlencoded
Last modified: 2011-01-31 12:12:48 PST
We are moving to Git Issues for bug tracking in future releases. During transition, content will be in both tools. If you'd like to file a new bug, please create an issue.
User interests stored in database urlencoded for some reason. Also, XSS risks exist when entries contain <angle brackets>.
Created attachment 3390 [details]
Patch against OJS 2.3.3-3
Created attachment 3391 [details]
Patch against PKP-lib