Fixed Custom user fields backend not working when using html

Breixo

Well-known member
Affected version
xf2.0.7
By changing the "Title" in "Custom user fields" to have an icon at the Postbit.
Like:
Code:
<i class="fab fa-android"></i>

(more examples)


It works, in front-end, however, it breaks at backend...

PS: easy to get it back, copy url and change from /delete to /edit
xxx/admin.php?custom-user-fields/mi_movil/delete
xxx/admin.php?custom-user-fields/mi_movil/edit

imaxe010-png.180372
 
We strip out HTML from the custom field list here as it can be problematic.

In retrospect, escaping the HTML here probably makes more sense - this just means the raw HTML text will appear rather than the icon.
 
We strip out HTML from the custom field list here as it can be problematic.

In retrospect, escaping the HTML here probably makes more sense - this just means the raw HTML text will appear rather than the icon.
That would remove the option to set an icon (html) instead of text at Custom user fields?
 
No, it'll just display as escaped HTML instead of being striped entirely (so that at least something shows up in the admin panel).
 
Top Bottom