The description value has no text format assigned to it, so the user input should equal the output, including newlines. Also description isn't properly escaped so users are able to add html code to the page.

Steps to reproduce:

  • Create an entity with "Link description" field
  • Add to the description Link 1 & &\nLine 2

Actual result: "Link 1 & &\nLine 2"

Expected result: Link 1 &amp; &amp;amp;<br />Line 2

Issue fork link_description-3276985

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

sinn created an issue. See original summary.

sinn’s picture

sinn commented
Issue summary: View changes
sinn’s picture

sinn commented
Issue summary: View changes

sinn opened merge request !2

sinn’s picture

sinn commented
Status: Active » Needs review
joevagyok’s picture

joevagyok commented
Status: Needs review » Reviewed & tested by the community

kirkkala made their first commit to this issue’s fork.

  • kirkkala committed a62afb0 on 1.0.x authored by sinn 
    Issue #3276985 by sinn: The user input should equal the output for the...
kirkkala’s picture

kirkkala
He/him
Primary language Finnish
Location Helsinki
commented

Thanks Sinn - and joevagyok for review. Agree this was very good addition to rendering the description.

kirkkala’s picture

kirkkala
He/him
Primary language Finnish
Location Helsinki
commented
Version: 1.0.0-beta1 » 1.0.x-dev
Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.