5

The iOS StackExchange app doesn't handle non-ASCII characters correctly, see city name in the screenshot below.

enter image description here

Improve this question
2
  • It's probably sending data as if it will be parsed as HTML.
    – bjb568
    Mar 17, 2014 at 3:47
  • There should be no reason for using HTML entities in the first place though.
    – Pekka
    Mar 17, 2014 at 3:54

1 Answer 1

Reset to default
2

Because of the way the StackExchange API works, there is indeed some need to decode HTML entities. In this case, the location on a User was not being decoded.

Fixed in version 0.1.26.

Improve this answer
1
  • So now user with name like Joe <script>alert('hacked');</script> will cause alert to show for any user visiting his profile? ;-)
    – Shadow Wizard Is Sad And Angry
    Mar 19, 2014 at 13:53

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .