Carlos Becker wrote:
Next I tried debian testing and installing from source

        wget http://download.bestpractical.com/pub//rt/release/rt-4.0.6.tar.gz
        git clone https://github.com/chakatodd/rt-extension-assettracker

basically installation went fine, but again I am getting display problems with 
the rt start page.
What I see in the front page is the text:

<LABEL ACCESSKEY="9"> <SELECT NAME ="Type" onchange="document.CreateAssetOfType.submit()" 
class="select-assettype"> </SELECT> </LABEL>
and Here is a Screenshot: http://files.muellers.ms/rt4-assettracker.png
I guess this is an CSS issue or rt-extension-assettracker is not (yet) 
compatible to rt4 ?
I had the same problem when by accident the RT machine was upgraded ;-(
I thought it had todo with some package being upgraded but it turned out it was RT itself. If you look at the asset component responsible for that text then you'll see the it uses scomp and in combination with a security hole that has been plugged in RT it is causing that problem. The l component in RT exists in a safe and unsafe version and nowadays it tries to escape html entities correctly but causes problems when you use scomp. Haven't figured out how to rewrite the assettracker component if you do please let me (us) know.

Greetings,

Joop

Reply via email to