2849: HTML not properly escaped in review editor

buck*****@gmai***** (Google Code) (Is this you? Claim this profile.)
Sept. 8, 2013
What version are you running?
1.6.13

What's the URL of the page containing the problem?
reviewboard/r/######/diff/#index_header

What steps will reproduce the problem?
1. Add a review comment containing "&"
2. Save the comment, but don't post it.
3. Click "edit review" at the top of the page.

What is the expected output? What do you see instead?
"&" has turned into "&", leading me to believe that HTML isn't being properly escaped somewhere in the review editor.

What operating system are you using? What browser?
Windows. Firefox 17.0.1 and Chrome 23.0.1271.97.

Please provide any additional information below.
N/A
david
#1 david
  • +Component-Reviews
    +EasyFix
david
#2 david
This is no longer a problem now that we've switched to markdown.
  • +Fixed