When you enter HTML as part of the description for a search server or index we currently sometimes escape it (namely on the entity’s “View” tab) and sometimes use it as-is (namely in the overview).
We should consistently allow HTML.

Issue fork search_api-3497469

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

drunken monkey created an issue. See original summary.

drunken monkey opened merge request !207

drunken monkey’s picture

drunken monkey
he/him
Primary language German
Location Vienna, Austria
commented
Status: Active » Needs review

See this MR.

I tested, but it seems like <script> tags are already stripped even in the overview, so this shouldn’t be a security issue.

  • drunken monkey committed 34c219a6 on 8.x-1.x 
    Issue #3497469 by drunken monkey: Fixed inconsistency in handling of...
drunken monkey’s picture

drunken monkey
he/him
Primary language German
Location Vienna, Austria
commented
Status: Needs review » Fixed

Merged.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.