miniBB ® miniBB®
miniBB Support Forums
 | Forums | Register | Reply | Search | Statistics | Manual |
Bugs miniBB Support Forums / Bugs /   

Image bug - a space keeps being introduced.

Author Steve Shaw
Registered
#1 | Posted: 9 Jul 2014 21:14 | Edited by: Steve Shaw 
[imgs=https://scontent-b-ams.xx.fbcdn.net/hphotos-xpf1/t1.0-9/q71/s720x720/10447406_10152582771569878_399879017678674370 _n.jpg]And back at the 'local'![/imgs]

There is a space that is added between the 1 and the 0 just after the first underscore...
It's not in the original URL, but keeps being added when the image is linked to.

The issue can be seen there

Weird!

Author kuopassa
Registered
#2 | Posted: 10 Jul 2014 08:03 | Edited by: kuopassa 
Yup. Long strings are split with spaces.

Author Steve Shaw
Registered
#3 | Posted: 10 Jul 2014 11:22 
Sorry, that makes no sense at all...

Most such links work perfectly.
Juts the odd one or two have additional 'spaces' added - nothing to do with underscores at all...

Author Paul
Lead Developer
#4 | Posted: 10 Jul 2014 14:01 
You can't add quotes and apostrophes as the altering text for the picture. Try to remove quotes, and the BB code should work.
This is a security issue we still have no exact solution about, and I'm experiencing kind of discomfort regarding this often, too.
Hopefully, in the future I'll find a solution to fix it.

Author Steve Shaw
Registered
#5 | Posted: 10 Jul 2014 14:08 
That was it!

A very strange bug indeed!!!

Author Paul
Lead Developer
#6 | Posted: 10 Jul 2014 14:54 
It's not a bug, it's made intentionally.
Providing quotes and apostrophes in ALTs could lead to security leak.

Author Paul
Lead Developer
#7 | Posted: 10 Jul 2014 14:56 
It's mentioned in updates history - Changes comparision: 2.5 - 2.5a [released: November 5, 2010].

Author tom322
Registered
#8 | Posted: 10 Jul 2014 19:33 
Hm, I may have a solution. Let quotes / apostrophes in file names be replaced with the 'grave accent' sign, ie: `. It looks like apostrophe and should not create a security issue.

Author Paul
Lead Developer
#9 | Posted: 10 Jul 2014 19:37 
tom322:
Let quotes / apostrophes in file names be replaced

It's not easy as you might think, couldn't be achieved with a regular expression of just one line...

Bugs miniBB Support Forums / Bugs / Image bug - a space keeps being introduced. Top

Your Reply Click this icon to move up to the quoted message

 Short link for this topic:

 ?
You are welcome to post anonymously, by entering a nickname with no password (if the similar Username has not been taken yet), or by leaving both fields empty. If you have a forums account, you can also sign in from this page without posting a message, or sign in and post at once.


Before posting, make sure your message is compliant with our forum posting rules. If not, it may be locked or deleted with no explanation.
 
miniBB Support Forums Powered by Forum Software miniBB ® Features  Requirements  Demo  Download  Showcase  Gallery of Arts
Compiler  Premium Extensions  Premium Support  License  Contacts
Try the Captcha add-on: protect your miniBB-forums from the automated spam and flood.
Captcha Addon for miniBB