HTML Tags in titles getting eaten <fixed/>

asked 2010-05-01 13:21:22 -0500

Pekka
590 ●22 ●29 ●37

updated 2010-05-04 18:55:53 -0500

Evgeny

13177 ●57 ●107 ●219 http://askbot.org/

It seems that HTML tags in titles are swallowed instead of escaped to HTML entities.

Clarification: I do not mean allowing HTML in TITLE tags, but converting < and > into their respective HTML entities < and gt;. At the moment, if you type in Hello <World>, the <World> part will be completely swallowed and the result will be Hello. The end result, in my opinion, should be Hello <World> I do not think any real HTML should be allowed in titles.

answered 2010-05-01 13:36:54 -0500

Evgeny

13177 ●57 ●107 ●219 http://askbot.org/

updated 2010-05-03 23:48:52 -0500

Hmm, tags in in titles - not supported yet. Should we? - I'm not sure.

I know Mathoverflow people like to insert equations into titles - but they do it using a non-html trick, as far as I know.

If we do - it would have to be a limited set of tags - you wouldn' want to have <div> <iframe> <table> and stuff like that.

What tags to you want to allow in title?

edit oh, I see what you mean - would it make sense to have input validation just reject titles with html tags rather than silently drop them? We sure can convert tags to entities - but the text would look weird an somebody might think that the site is broken after looking at <b&gt

edit 2 ok convinced me - it's a bug dammit :)!

edit 3 fixed in the repository - will deploy tomorrow

edit flag offensive delete link

Comments

@Evgeny check out my update.

Pekka ( 2010-05-02 02:43:24 -0500 )edit

@Evgeny mm, I think the entities could be displayed as `<` `>` in the actual title, they just would have to be encoded internally so they're not rendered.

Pekka ( 2010-05-02 13:01:28 -0500 )edit

@Pekka hey, you're right and I'm slow! Of course - why not be able to ask questions about html tags.