Bitcoin Forum

Other => Meta => Topic started by: kopipe on December 13, 2020, 09:23:16 AM



Title: Subject that are "too long" get cut if they use predominately "wide" characters
Post by: kopipe on December 13, 2020, 09:23:16 AM
And an ampersand gets put at the end, at least in one case, perhaps pointing to an issue where HTML entities are being considered and not the actual text I entered.

I made a thread with subject 【簡単に稼げる】Google Play日本版でふしぎの国のアリス(日本語吹替版のみ!)を購入して私に送ってください。ビットコインで4千円の手数料をお支払いします in the 日本語 (Japanese) (https://bitcointalk.org/index.php?board=252.0) forum: link (https://bitcointalk.org/index.php?topic=5299606.msg55816520#msg55816520).

It got cut down to:

Quote from: Buggy actual Bitcointalk output
【簡単に稼げる】Google Play日本版でふしぎの国のアリス(日本語吹替版のみ!)を&

 ???

I imagine this is a known issue, but that little & scares me, makes me think XSS might be possible by someone smarter than me, if they combined this bug with other bugs I don't know about. Please look into this.


Title: Re: Subject that are "too long" get cut if they use predominately "wide" characters
Post by: GazetaBitcoin on December 13, 2020, 10:58:07 AM
As far as I know, there is a certain number of characters for topic titles and thos fixed number can't be extended. However, when using regular characters, you are not allowed to make a title longer than the allowed number of characters. I never heard about writing a long topic title, exceeding the allowed number of characters, and being cut afterwards. If others have more knowledge, I'd also like to hear more opinions.


Title: Re: Subject that are "too long" get cut if they use predominately "wide" characters
Post by: AB de Royse777 on December 13, 2020, 11:16:07 AM
The current character limit is 80 characters for a topic title and 84 characters for a topic reply title. In the topic reply title the additional four characters are used for "Re: " but if you want you can use this addition four character space with whatever you want.

I have tested it on this topic: https://ninjastic.space/topic/5299629 (sorry mod for this extra job, I was too curious LOL)

However, in the default SMF the limit is 255 characters. Read this please: https://www.simplemachines.org/community/index.php?topic=436723.0

Update:
It seems your issue is not in character count. I checked the number of characters which is 80 for the following title:
Quote
【簡単に稼げる】Google Play日本版でふしぎの国のアリス(日本語吹替版のみ!)を購入して私に送ってください。ビットコインで4千円の手数料をお支払いします

But the remaining characters after the cut off is 45 characters:
Quote
【簡単に稼げる】Google Play日本版でふしぎの国のアリス(日本語吹替版のみ!)を&

I think when the characters are counting by the system for the local language then it's messing up with it's unicode.


Title: Re: Subject that are "too long" get cut if they use predominately "wide" characters
Post by: DooMAD on December 13, 2020, 11:27:19 AM
The current character limit is 80 characters for a topic title and 84 characters for a topic reply title. In the topic reply title the additional four characters are used for "Re: " but if you want you can use this addition four character space with whatever you want.

I have tested it on this topic: https://ninjastic.space/topic/5299629 (sorry mod for this extra job, I was too curious LOL)

However, in the default SMF the limit is 255 characters. Read this please: https://www.simplemachines.org/community/index.php?topic=436723.0

I think what the OP is saying is that their title got cut to 45 characters and then places an '&' at the end.  Their concern is that the '&' might have the potential to be used in a cross-site scripting attack.  I'm not a code guy, so I don't know if such a threat is real or not.


//EDIT:  Ah, you edited.   :D