miniBB ®

miniBB

®
Support Forums
  
 · Start · Sign in · Register · Search · Statistics · File Bank · Manual ·
Bugs miniBB Support Forums / Bugs /  
 

Image bug - a space keeps being introduced.

 
Author Steve Shaw
Partaker
#1 · Posted: 9 Jul 2014 21:14Reply Quote
[imgs=https://scontent-b-ams.xx.fbcdn.net/hphotos-xpf1/t1.0-9/q71/s720x720/10447406_10152582771569878_399879017678674370 _n.jpg]And back at the 'local'![/imgs]

There is a space that is added between the 1 and the 0 just after the first underscore...
It's not in the original URL, but keeps being added when the image is linked to.

The issue can be seen there

Weird!

Author kuopassa
Partaker
#2 · Posted: 10 Jul 2014 08:03Reply Quote
Yup. Long strings are split with spaces.

Author Steve Shaw
Partaker
#3 · Posted: 10 Jul 2014 11:22Reply Quote
Sorry, that makes no sense at all...

Most such links work perfectly.
Juts the odd one or two have additional 'spaces' added - nothing to do with underscores at all...

Author Paul
Lead Lead Developer
#4 · Posted: 10 Jul 2014 14:01Reply Quote
You can't add quotes and apostrophes as the altering text for the picture. Try to remove quotes, and the BB code should work.
This is a security issue we still have no exact solution about, and I'm experiencing kind of discomfort regarding this often, too.
Hopefully, in the future I'll find a solution to fix it.

Author Steve Shaw
Partaker
#5 · Posted: 10 Jul 2014 14:08Reply Quote
That was it!

A very strange bug indeed!!!

Author Paul
Lead Lead Developer
#6 · Posted: 10 Jul 2014 14:54Reply Quote
It's not a bug, it's made intentionally.
Providing quotes and apostrophes in ALTs could lead to security leak.

Author Paul
Lead Lead Developer
#7 · Posted: 10 Jul 2014 14:56Reply Quote
It's mentioned in updates history - Changes comparision: 2.5 - 2.5a [released: November 5, 2010].

Author tom322
Active Member
#8 · Posted: 10 Jul 2014 19:33Reply Quote
Hm, I may have a solution. Let quotes / apostrophes in file names be replaced with the 'grave accent' sign, ie: `. It looks like apostrophe and should not create a security issue.

Author Paul
Lead Lead Developer
#9 · Posted: 10 Jul 2014 19:37Reply Quote
tom322:
Let quotes / apostrophes in file names be replaced
It's not easy as you might think, couldn't be achieved with a regular expression of just one line...

Bugs miniBB Support Forums / Bugs /
 Image bug - a space keeps being introduced.
 Share Topic's Link

Your Reply Click this icon to move up to the quoted message

BB code for the Bold StyleBB code for the Italic StyleBB Code for the PictureBB code for the URLUpload a File

  ?
Post as a Guest, leaving the Password field blank. You could also enter a Guest name, if it's not taken by a member yet. Sign-in and post at once, or just sign-in, bypassing the message's text.


Before posting, make sure your message is compliant with forum rules; otherwise it could be locked or removed with no explanation.

 

 
miniBB Support Forums Powered by Forum Software miniBB ® Home  Features  Requirements  Demo  Download  Showcase  Gallery of Arts
Compiler  Premium Extensions  Premium Support  License  Contact Us
Try the File and Picture Attachments add-on: extend your miniBB-forums, attaching images and files.