Steps to reproduce:

1) Set your UPS password to something with a & in it
2) Checkout as a customer and try to calculate shipping
3) Observe Error

Error: Hard 10001: The XML document is not well formed

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

Derimagia created an issue. See original summary.

Derimagia’s picture

Derimagia’s picture

Status: Active » Needs review
TR’s picture

Assigned: Derimagia » Unassigned
FileSize
1 KB

This issue is a subset of the larger problem raised in #2459739: No escaping of XML characters in uc_ups, namely there has never been any xml-encoding of values inserted into the UPS (or USPS) requests.

I have been working on this for the Drupal 8 version of Ubercart, and will eventually backport the fix. Attached is a patch which is a backport of just the UPS AccessRequest, which is what you're having trouble with. Can you test out this patch and let me know if it fixes the problem you're currently having?

Derimagia’s picture

Sorry for the late response - Sadly I was just helping out with the project and I just told them to change their password to something else in the end. I will test this next time it's possible for me too.