[Konversation-devel] [Bug 111848] New: HTML code is not escaped to be shown by knotify

[Candid Dauth]

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
         
http://bugs.kde.org/show_bug.cgi?id=111848         
           Summary: HTML code is not escaped to be shown by knotify
           Product: konversation
           Version: unspecified
          Platform: Compiled Sources
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
        AssignedTo: konversation-devel kde org
        ReportedBy: candid.dauth web de


Version:            (using KDE KDE 3.4.2)
Installed from:    Compiled From Sources
OS:                Linux

I get notified by knotify through a passive window at new incoming messages in Konversation. knotify expects HTML code as text so that applications can format the text there (bold/italic, for example).

Well, Konversation gives unescaped text of the incoming message to knotify and does not encode “&” as “&” and so on.
So, when somebody writes “<test>” in the chat, the passive window doesn’t show that. When someone writes “<b>test</b>”, it appears as bold “test” in the passive window. And when they send “&ndash;”, the passive window displays “–”.

Konversation should escape “&” to “&amp;”, “<” to “&lt;”, “>” to “&gt;”, and — optionally — “"” to “&quot;”, when giving a received message to knotify.