Problems, need help? Have a tip or advice? Post it here.
4 posts Page 1 of 1
Having a strange issue occuring.
Any links that include the letter X are being automatically re-written to be xxxx.
i.e. Expression.pdf becomes Exxxxpression.pdf

Obviously this is causing a broken link.

Any idea what could be triggering this change in the source dcode?


@webecho
It may be couch's xss checking. You said it happens for 'any' links, but if the problem is contained to editable regions then try setting no_xss_check='1'. If it isn't xss checking, then I'm not sure what it could be.
It is indeed Couch's XSS sanitization getting a little paranoid here.

It is not actually 'any links that include the letter X' but the specific term 'expression' that is being neutralized.
This sanitization will occur only when the term appears in an attribute of a HTML tag (the 'href' of '<a>' tag in your case) in an editable region's content.

It is a safety measure and, I think, you have hit a very specific corner case. Since you are likely to have only one 'expression.pdf', you could use a slightly different name for the file to avoid this.
Thanks guys
it's all fixed up now by just renaming the file.
Unfortunately, it's a product line so there are a few files that are slightly oddly named - but I guess that can't be helped.

Thanks for the quick replies.


@webecho
4 posts Page 1 of 1
cron