Comment 0 for bug 527374

Revision history for this message
Roman Yepishev (rye) wrote :

STR:

1. Create a note with any title
2. Put unescaped &, or <tag> to the note.
3. Save the note.
4. Everything looks fine.
5. Now go to /notes/ url

Actual result:

OOPS:
 * xmlParseEntityRef: no name.
 * Opening and ending tag mismatch.

Expected result:
Everything works.

Reason:
&, <, and > are not escaped when saved to server couchdb. Upon reading the notes server parses the stored value and raises an exception.