[lbdm]

Hi,

I've just installed OpenCATS on my debian server.

Works great, with mostly one exception : when I fill the job description with ckedit and save it, the description then shows the HTML code. And the online application shows the same HTML code.

So let's say in ckedit I write : "This is a job desc" in bold, the description section of the job order will actually show :
<p><strong>This is a job desc</strong></p> and the same on the online application. Looking at the HTML source page of the online application, here is what I find :

<p><strong>Description:</strong></p>
&lt;p&gt;&lt;strong&gt;This is a job desc&lt;/strong&gt;&lt;/p&gt;

So looks like the description has been HTML encoded with htmlentities.

What am I doing wrong? Any help appreciated, thanks!

[lbdm]

Update on my previous post :
- I've installed v0.9.7.2 on WIndows to see whether i could reproduce the problem there too or if the issue was from my configuration on debian : same problem on Windows too
- I've downgraded to v0.9.6 and then the problem is gone

So it looks to me that latest version has introduced that problem. As there's been several security fixes likely involving php htmlentities / htmlspecialchar, that might the "culprit".

[RussH]

Hey there - thanks for reporting this - the 0.9.7.2 release did indeed add in changes here. It shouldn't be difficult to find the culprit. I'll get that amended.. and will share the fix here.

[RussH]

Okay, this was fixed and the new code is in github master. Not pushed a release yet.

[lbdm]

Many thanks! I re-installed from the master and I confirm it's fixed.

[RussH]

Great news - please please let me know any other issues you face.. there's been quite a few commits just to lock down security so want to ensure it's all functional.