Multiverse Feedback: Cardlist | Visual spoiler | Export | Booster | Comments | Search | Recent activity
Mechanics | Upcoming releases | Skeleton

CardName: HTML <i>here</i> is <u>not</u> escaped<script>alert(3)</script> Cost: {R} Type: Pow/Tgh: / Rules Text: HTML escape in card titles Flavour Text: Set/Rarity: Multiverse Feedback None

HTML here is not escapedalert(3)
{r}
 
 
HTML escape in card titles
Expand text
Updated on 28 Sep 2014 by Alex

History: [-]

2014-07-07 10:08:20: Vitenka created and commented on the card HTML here is not escapedalert(3)
on 07 Jul 2014 by Vitenka:

As demonstrated on Okay buddy, this is [insert format here] angle brackets in card titles are not being escaped (properly?) when displayed on the cardset summary page. ( http://multiverse.heroku.com/cardsets/ )

2014-07-07 13:34:57: Alex edited HTML here is not escapedalert(3)
on 07 Jul 2014 by Alex:

Yi-yikes. Thanks, that needs fixing urgently.

2014-07-07 14:33:09: Vitenka edited HTML here is not escapedalert(3)
2014-07-07 15:42:09: Alex edited HTML here is not escapedalert(3)
2014-09-28 20:18:58: Alex edited HTML here is not escapedalert(3)
2014-09-28 20:19:08: Alex edited HTML here is not escapedalert(3):

fixed

Add your comments:


(formatting help)
Enter mana symbols like this: {2}{U}{U/R}{PR}, {T} becomes {2}{u}{u/r}{pr}, {t}
You can use Markdown such as _italic_, **bold**, ## headings ##
Link to [[[Official Magic card]]] or (((Card in Multiverse)))
Include [[image of official card]] or ((image or mockup of card in Multiverse))
Make hyperlinks like this: [text to show](destination url)
What is this card's power? Rumbling Baloth
(Signed-in users don't get captchas and can edit their comments)