Mantis Bug Tracker
 

View Issue Details Jump to Notes ] Wiki ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0003907mantisbtrsspublic2004-05-31 11:312005-05-31 11:33
Reporterdfaught 
Assigned Tovboctor 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version1.0.0a3 
Summary0003907: Bad RSS link on http://bugs.mantisbt.org/ [^] [http://bugs.mantisbt.org/ [^]]
DescriptionOn the bottom of http://bugs.mantisbt.org/main_page.php, [^] there is a link labeled "RSS" that goes to http://bugs.mantisbt.org/news_rss.php?project_id=1. [^] When I click on the link, I get this error:

XML Parsing Error: undefined entity
Location: http://bugs.mantisbt.org/news_rss.php?project_id=1 [^]
Line Number 33, Column 1:

 * Sec bug_view_page.php?bug_id=0003660: Ability to execute arbitrary SQL statement if register_globals = ON.

^

I'm not sure what the link is supposed to do, but probably not this. :-)
TagsNo tags attached.
Attached Files

- Relationships

-  Notes
User avatar (0005642)
Wanderer (developer)
2004-06-01 03:59
edited on: 2004-06-01 04:03

It's not for direct browsing, it's URL, which can be added to any RSS-aggregator for reading news (and only news now :-( ) from site

Just for note - it works, and news really aggregated in reader

edited on: 06-01-04 04:03
User avatar (0005646)
dfaught (reporter)
2004-06-01 16:10

I usually get to a page of XML when I click on RSS links, rather than a strange error. I'm not much of an RSS user, so I could be mistaken, but it seems odd for a hyperlink that shows up in the web browser to lead to an error like this.
User avatar (0005647)
dfaught (reporter)
2004-06-01 16:14

Hmmm, I'm getting the same error from my news aggregator, so this looks like a real error in the RSS feature to me. Can you reproduce this by adding a new subscription based on the current RSS link?
User avatar (0005648)
Wanderer (developer)
2004-06-01 21:36

I tried in my (RSS-reader plugin for Miranda)- and got feed and no errors. You can test your aggregator on my 0.19-CVS installation (but AFAIS nothing was changed in this area) - http://bts.e-city.net.ru/demo/news_rss.php?project_id=1 [^]
PS - sorry, but news only in Russian
User avatar (0005649)
dfaught (reporter)
2004-06-01 22:51

I looked at your demo site, and yes, it looks okay. Is this issue unique to version 0.18.2? (My own installation isn't configured to use RSS, so I can't check there.)
User avatar (0006425)
rfoster (developer)
2004-07-28 18:42

This issue is really biting me :( The problem is that the '&' in   is invalid, and needs to be escaped as & in XML to work properly. Note that this is only showing up in messages like the change log. (ie. those containing  )

I've tested this by substituting the following string:
  
with
  
and it works perfectly in a local copy of the current rss feed for this project.
User avatar (0006427)
vboctor (administrator)
2004-07-28 19:10

I think this is a bug in the RSS library that we are using. I would expect this library to escape the data before generating the XML file.

These are the options to fix this library:
- Add the escaping to the external library (or see if this issue is fixed in more recent versions).
- Move to a different library (that hopefully fixes this and uses GPL license.
- For now, escape the data before setting it into the RSS generator.

This bug will depend on the contents of the news, rather than a specific version of Mantis.
User avatar (0009893)
vboctor (administrator)
2005-04-24 09:37

I tested it now and it seems to be working. The official bugtracker is now using Mantis 1.0.0a1 which may have the fix for this problem.
User avatar (0009894)
vboctor (administrator)
2005-04-24 09:45

I didn't read the comments again before posting my last comment. The problem is probably not fixed yet.

- Issue History
Date Modified Username Field Change
2004-05-31 11:31 dfaught New Issue
2004-06-01 03:59 Wanderer Note Added: 0005642
2004-06-01 04:02 Wanderer Note Added: 0005643
2004-06-01 04:03 Wanderer Note Deleted: 0005643
2004-06-01 04:03 Wanderer Note Edited: 0005642
2004-06-01 16:10 dfaught Note Added: 0005646
2004-06-01 16:10 dfaught Issue Monitored: dfaught
2004-06-01 16:14 dfaught Note Added: 0005647
2004-06-01 21:36 Wanderer Note Added: 0005648
2004-06-01 22:51 dfaught Note Added: 0005649
2004-07-28 18:42 rfoster Note Added: 0006425
2004-07-28 19:10 vboctor Note Added: 0006427
2004-08-11 19:04 rfoster Issue Monitored: rfoster
2005-04-24 09:37 vboctor Note Added: 0009893
2005-04-24 09:37 vboctor Status new => feedback
2005-04-24 09:37 vboctor Category webpage => rss
2005-04-24 09:45 vboctor Note Added: 0009894
2005-04-27 10:28 vboctor Assigned To => vboctor
2005-04-27 10:37 vboctor Status feedback => resolved
2005-04-27 10:37 vboctor Fixed in Version => 1.0.0a3
2005-04-27 10:37 vboctor Resolution open => fixed
2005-05-31 11:33 vboctor Status resolved => closed


MantisBT 1.2.2 git master-1.2.x[^]
Copyright © 2000 - 2010 MantisBT Group
Time: 0.2200 seconds.
memory usage: 1,980 KB
Powered by Mantis Bugtracker