STR 1:
- Create a new custom field.
- Use an apostrophe somewhere in the 'Instructions' field. e.g.
Number of 'rooms'
- Save the field.
- Hover over the Text icon to view the instructions.
ER: Number of 'rooms'
AR: Number of \'rooms\'
On subsequent visits to the custom field list panel, hovering over the Text icon reveals:
AR: Number of 'rooms'
After editing the field and clicking Save, then hovering over the Text icon:
AR: Number of 'rooms'
On the Write panel, the instructions field renders:
AR: Number of 'rooms'
STR 2:
- Create a new custom field.
- Use a double quote somewhere in the 'Instructions' field. e.g.
Number of "rooms"
- Save the field.
- Hover over the Text icon to view the instructions.
ER: Number of "rooms"
AR: Number of \
On subsequent visits to the custom field list panel, hovering over the Text icon reveals:
AR: Number of
Recommendation: review consistent use of doSlash() and txpspecialchars()
STR 1:
Number of 'rooms'ER:
Number of 'rooms'AR:
Number of \'rooms\'On subsequent visits to the custom field list panel, hovering over the Text icon reveals:
AR:
Number of 'rooms'After editing the field and clicking Save, then hovering over the Text icon:
AR:
Number of 'rooms'On the Write panel, the instructions field renders:
AR:
Number of 'rooms'STR 2:
Number of "rooms"ER:
Number of "rooms"AR:
Number of \On subsequent visits to the custom field list panel, hovering over the Text icon reveals:
AR:
Number ofRecommendation: review consistent use of
doSlash()andtxpspecialchars()