Interesting thread.

The parseBBML() UDF that I wrote for CFMBB (based on Jim Davis'
DP_ParseBBML) has this flaw, I just tested it.

Basically, I think the fix is to modify this line:


                                Input = ReReplaceNoCase(Input,
"\[(img|image)\]([^[#Chr(171)#]*)\[/(img|image)\]", "#Chr(171)#img
src=#Chr(167)#\2#Chr(167)##Chr(187)#", "All");

(the funky chr() values are temporary replacement characters for the
conversion process).

Basically, I think if you prevent conversion of images with quotes,
this  goes away.  Ie...


                                Input = ReReplaceNoCase(Input,
"\[(img|image)\]([^[#Chr(34)##Chr(171)#]*)\[/(img|image)\]",
"#Chr(171)#img src=#Chr(167)#\2#Chr(167)##Chr(187)#", "All");

But I haven't tested this yet.

(btw, Ray's Galleon uses DP_ParseBBML so Galleon may have this issue
as well, along with a similar solution)

Rick

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:335989
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to