- Affected version
- 2.2.12
XF\Pub\Controller\Editor::actionDialog
is invoked by the front-end XF.EditorHelpers.loadDialog
function which often tags a bb-code tag and then returns a dialog for it.However
actionDialog
uses the regex '/[^a-zA-Z0-9]/'
while a bb-codes use the regex /^[a-z0-9_]*$/i
.This means
_
is stripped from the argument when calling XF\Pub\Controller\Editor::loadDialog
makes matching to the exact bb-code much harder than it should be (as it isn't possible to determine if a dialog for bbcode_a
and bbcodea
or is being requested).