Some html tags not stripped from category description

I came across this by accident.

Some HTML tags like <big> <small> and <em> are not stripped from the category description when displayed for instance in the category dropdown and in the category settings.

It seems like this does not affect any security related tags like script and style so it’s a minor thing.

Repro on tests-passed.

Set the category description to something like

This is getting <big><big><big><big>Big

2 Likes

Quick update we have @Roman_Rizzi assigned and he will get this sorted, no specific timeframe but we hope to have this sorted in the upcoming weeks

Thanks for the great bug report

2 Likes

The category-chooser component used the category description instead of the description_text, which strips HTML. We allow HTML elements on the description because we use it to generate the category definition topic. Should be fixed by:

2 Likes