id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc	mlocked
10225	Mythweb is not safe for inappropriate characters in title/subtitles of shows	henrik@…	Rob Smith	"It the title or subtitle of a show contains especially single or double quotes, it breaks the html/javascript structure of at least the recorded.php and details.php of mythweb. This is true for 0.24.1 and GIT of 23/12 2011.

The case arises because the EIT date of the Danish DR1 channel is bad or misinterpreted so half of the description ends up in the subtitle. This is bearable (for me) it it wasnt because it breaks mythweb. But it could arise if the subtitle/title actually did contain quotes etc.

The symptoms is that the javascripts for 'delete' a show does not work because of badly paired quotes in the HTML code. Note, that the page itself looks normally!

The proposed solution (as implemented by me in my case) is to use one of the HTML-safe functions on the title and subtitle parts wherever they are used directly in the HTML part such as htmlentities(), htmlspecialchars(), htmlspecialchars() etc."	Bug Report - General	closed	minor	unknown	Plugin - MythWeb	Master Head	medium	Won't Fix	mythweb, character encoding		0