Seeing HTML on the search results page for a dropdown

RTIR
#1

Hello,

This RTIR installation was built using the README instructions from the
applicable tar.gz archives. It was built on a fresh CentOS 6.4 machine
using:
rt-3.8.16
RTFM-2.4.5
RT-IR-2.6.1

perl -v

This is perl, v5.10.1 (*) built for x86_64-linux-thread-multi

I’ve attached a screen shot but basically I’ll say here that it looks like
a dropdown related to charting the results is getting output as it’s HTML
instead of a rendered field. When I look at the source of the page I see
that everything past the following text is being HTML encoded to include
&XXX; codes:
<input type=“hidden” class=“hidden” name=“Format” value="

Here’s a sample of what’s immediately after that text (note the &XXX; codes
instead of symbols like < and > etc… I don’t know why the ' codes
(apostrophe) are even in there either.

' <b><a
href="WebPath/Ticket/Display.html?id=id">id</a></b>/TITLE:#',
'<b><a
href="WebPath/Ticket/Display.html?id=id">Subject</a></b>/TITLE:Subject',
'Status',
'QueueName',
'OwnerName',
'Priority',
'NEWLINE',
'',
'<small>Requestors</small>',
'<small>CreatedRelative</small>',
'<small>ToldRelative</small>',
'<small>LastUpdatedRelative</small>',
'<small>TimeLeft</small>'" />
grouped by <select id="PrimaryGroupBy"
name="PrimaryGroupBy">
<option value="Status"
selected="selected">Status</option>
etc…

Landon Stewart :: lstewart@iweb.com
Lead Specialist, Abuse and Security Management
Spécialiste principal, gestion des abus et sécurité
http://iweb.com :: +1 (888) 909-4932

#2

Hello,
I’ve attached a screen shot but basically I’ll say here that it looks like a dropdown related
to charting the results is getting output as it’s HTML instead of a rendered field. When I
look at the source of the page I see that everything past the following text is being HTML
encoded to include &XXX; codes:

You need to apply the following patch to your RT-IR plugin for
compatibility with security fixes in newer versions of RT.

wget https://github.com/bestpractical/rtir/commit/ba4e3aae903888cf001bb90f4a4094b2a65d52e2.patch
cd /opt/rt3/local/plugins/RT-IR
patch -p1 < /path/to/downloaded/patch

-kevin

#3

Hello,
I’ve attached a screen shot but basically I’ll say here that it looks
like a dropdown related
to charting the results is getting output as it’s HTML instead of a
rendered field. When I
look at the source of the page I see that everything past the
following text is being HTML
encoded to include &XXX; codes:

You need to apply the following patch to your RT-IR plugin for
compatibility with security fixes in newer versions of RT.

wget
https://github.com/bestpractical/rtir/commit/ba4e3aae903888cf001bb90f4a4094b2a65d52e2.patch
cd /opt/rt3/local/plugins/RT-IR
patch -p1 < /path/to/downloaded/patch

Thank you Kevin, That did the trick.

Landon Stewart :: lstewart@iweb.com
Lead Specialist, Abuse and Security Management
Spécialiste principal, gestion des abus et sécurité
http://iweb.com :: +1 (888) 909-4932