Ticket Change Details
Not logged in
Overview

Artifact ID: 1e7e10c80892e085ba4ef9b4133127e8da432e07
Ticket: 83e9e0016b65721084ef29b466c1a7ea59ea7d7e
html tags are apparently not escaped or converted when presented via timeline.rss
User & Date: anonymous 2010-01-10 00:46:38
Changes

  1. comment changed to:
    A fossil commit with a comment such as the following,
    
    ---
    Note that couchdb document field names are now contained in priv/project.conf file. The strings within the <<>> are the names which should be used in html documents, e.g. <<"_id">> or <<"iata_code">> and the name to POST from a form would be "_id" or "iata_code" respectively.
    ---
    
    will break my RSS reader when I read timeline.rss ; though I use liferea on GNU/Linux, I believe (though do not know) that illegal XML is being presented by timeline.rss by not escaping or encoding html tags and characters.  For the above comment, liferea says that <<>> is an invalid element name.  I can easily cause breakage by simply adding a commit comment such as
    
    ---
    bugfix, added the opening &lt;h1&gt; tag in widget.html
    ---
    
    in which case the RSS reader complains about an open tag with no closing tag.  I then have to wait 20 new commits for the "bad" comment to roll out of the timeline.rss data before I can again read the fossil feed in my RSS reader.
    
    NOTE that I wrote the above tag using encoded less than and greater than signs so that I could create this bug report.  I cannot expect my fossil users (nor myself) to remember to write out ampersand g t ; etc. whenver an html tag is referenced in a commit comment.
    
    Click edit for this report to see the actual text to which I am referring regarding "encoded less than and greater than signs".
    
    My feature request is that timeline.rss present valid parseable XML atom or RSS data.
    
  2. foundin changed to: "current"
  3. private_contact changed to: "9271333c277938acfba7db515d7eb25b37a30122"
  4. severity changed to: "Important"
  5. status changed to: "Open"
  6. title changed to:
    html tags are apparently not escaped or converted when presented via timeline.rss
    
  7. type changed to: "Feature_Request"