[Koha-bugs] [Bug 25373] &nbsp entity usage no longer works in custom XSLTs

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25373

--- Comment #11 from didier <didier.gautheron at biblibre.com> ---
(In reply to David Cook from comment #9)
> (In reply to Jonathan Druart from comment #8)
> > Yes but it's not recommended, then you are vulnerable to what is described
> > in bug 23290. The easiest seems to replace nsbp in your xsl files.
> 
> I agree with Jonathan. I'd recommend not expanding entities as you'll create
> a security vulnerability in your installation. Just use   directly
> instead of  .

Hi,
WON'T FIX make sense.

Are you going to remove ENTITY in xls or should I make a report?

Removing  [<!ENTITY nbsp " " >] and using   will do for us, thanks.

No authority on XSTL files, libraries change them, moreover in french
typography you add a space before many punctuation marks, like colon. Cf.
(broken!) Koha french manual translation.
https://koha-community.org/manual/18.05/fr/html/systempreferences.html

BTW where do we fix this one? It's an eyesore :)

Regards
Didier

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.