From kde-bugs-dist  Wed Aug 31 21:25:33 2005
From: Candid Dauth <candid.dauth () web ! de>
Date: Wed, 31 Aug 2005 21:25:33 +0000
To: kde-bugs-dist
Subject: [Bug 111848] New: HTML code is not escaped to be shown by knotify
Message-Id: <20050831232532.111848.candid.dauth () web ! de>
X-MARC-Message: https://marc.info/?l=kde-bugs-dist&m=112552353816225

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
         
http://bugs.kde.org/show_bug.cgi?id=111848         
           Summary: HTML code is not escaped to be shown by knotify
           Product: konversation
           Version: unspecified
          Platform: Compiled Sources
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
        AssignedTo: konversation-devel kde org
        ReportedBy: candid.dauth web de


Version:            (using KDE KDE 3.4.2)
Installed from:    Compiled From Sources
OS:                Linux

I get notified by knotify through a passive window at new incoming messages in Konversation. knotify expects HTML code as text so that applications can format the text there (bold/italic, for example).

Well, Konversation gives unescaped text of the incoming message to knotify and does not encode “&” as “&amp;” and so on.
So, when somebody writes “<test>” in the chat, the passive window doesn’t show that. When someone writes “<b>test</b>”, it appears as bold “test” in the passive window. And when they send “&ndash;”, the passive window displays “–”.

Konversation should escape “&” to “&amp;”, “<” to “&lt;”, “>” to “&gt;”, and — optionally — “"” to “&quot;”, when giving a received message to knotify.