https://bugs.kde.org/show_bug.cgi?id=504078

Thomas Monjalon <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
      Latest Commit|                            |https://invent.kde.org/fram
                   |                            |eworks/kcoreaddons/-/commit
                   |                            |/cd4e26ba48bfdcbd1c03a63564
                   |                            |8b8ec40df537cf
         Resolution|---                         |FIXED

--- Comment #7 from Thomas Monjalon <[email protected]> ---
Git commit cd4e26ba48bfdcbd1c03a635648b8ec40df537cf by Thomas Monjalon.
Committed on 17/05/2026 at 13:02.
Pushed by cullmann into branch 'master'.

KTextToHTML: escape HTML entities in highlighted text

highlightedText() wraps matched content in HTML tags
(<b>, <u>, <i>, <s>) but inserts the text without HTML-escaping.
When the highlighted text contains angle brackets
(e.g. a C comment like /* prefixed with <bus>: */),
the raw < and > end up in the HTML output
and get interpreted as unknown HTML tags by the renderer,
making the content between them invisible.

Fix by calling toHtmlEscaped() on the captured content
before wrapping it in formatting tags.
Made-with: Cursor

M  +5    -1    autotests/ktexttohtmltest.cpp
M  +5    -4    src/lib/text/ktexttohtml.cpp

https://invent.kde.org/frameworks/kcoreaddons/-/commit/cd4e26ba48bfdcbd1c03a635648b8ec40df537cf

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to