You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
That seems reasonable, however, when I wrote the code to harvest data from GBIF's GrSciColl API, I incorporated several GrSciColl/indexHerbariorum fields and links to Index Herbariorum and GrSciColl in the notes field, using some html. Santitizing with htmlspecialchars unfortunately breaks that functionality. See:
@Atticus29: There's different ways this could be fixed: sanitizing all except the notes, allowing limited html, having more institution editor fields to avoid this need, etc. Up to you as to what works best.
The text was updated successfully, but these errors were encountered:
mickley
changed the title
Bug when sanitizing institution data harvested from GrSciColl
[Bug] Sanitizing institution data harvested from GrSciColl breaks functionality
Dec 17, 2024
In the institution editor, there is now a call to sanitize all institution data before displaying it using htmlspecialchars(), see:
Symbiota/collections/misc/institutioneditor.php
Line 201 in 06f6cb6
That seems reasonable, however, when I wrote the code to harvest data from GBIF's GrSciColl API, I incorporated several GrSciColl/indexHerbariorum fields and links to Index Herbariorum and GrSciColl in the notes field, using some html. Santitizing with htmlspecialchars unfortunately breaks that functionality. See:
Symbiota/js/symb/collections.grscicoll.js
Line 297 in 06f6cb6
Here's what it should look like:
Here's what the sanitizing does:
@Atticus29: There's different ways this could be fixed: sanitizing all except the notes, allowing limited html, having more institution editor fields to avoid this need, etc. Up to you as to what works best.
The text was updated successfully, but these errors were encountered: