diff --git a/gulliver/system/class.g.php b/gulliver/system/class.g.php
index 0b39f7d33..a00bdc624 100644
--- a/gulliver/system/class.g.php
+++ b/gulliver/system/class.g.php
@@ -1762,7 +1762,7 @@ class G
}
//Non-quoted
if (($match[1][$r][0] == '#') && (isset($result[$match[2][$r][0]]))) {
- $text = ($applyHtmlEntities && !stringIsValidHtml($result[$match[2][$r][0]])) ?
+ $text = ($applyHtmlEntities && !stringIsValidHtml($result[$match[2][$r][0]]) && $match[2][$r][0] !== '__ABE__') ?
htmlentities(G::unhtmlentities($result[$match[2][$r][0]]), ENT_COMPAT, 'UTF-8') :
$result[$match[2][$r][0]];
// Replenish the tag
because is valid
@@ -1772,7 +1772,7 @@ class G
}
//Non-quoted =
if (($match[1][$r][0] == '=') && (isset($result[$match[2][$r][0]]))) {
- $text = ($applyHtmlEntities && !stringIsValidHtml($result[$match[2][$r][0]])) ?
+ $text = ($applyHtmlEntities && !stringIsValidHtml($result[$match[2][$r][0]]) && $match[2][$r][0] !== '__ABE__') ?
htmlentities(G::unhtmlentities($result[$match[2][$r][0]]), ENT_COMPAT, 'UTF-8') :
$result[$match[2][$r][0]];
// Replenish the tag
because is valid
@@ -1820,7 +1820,6 @@ class G
$nrt = array("\n", "\r", "\t");
$nrthtml = array("(n /)", "(r /)", "(t /)");
- $content = G::unhtmlentities($content);
$strContentAux = str_replace($nrt, $nrthtml, $content);
$occurrences = preg_match_all('/\@(?:([\>])([a-zA-Z\_]\w*)|([a-zA-Z\_][\w\-\>\:]*)\(((?:[^\\\\\)]*(?:[\\\\][\w\W])?)*)\))((?:\s*\[[\'"]?\w+[\'"]?\])+)?/',
diff --git a/tests/unit/gulliver/system/ReplaceDataFieldTest.php b/tests/unit/gulliver/system/ReplaceDataFieldTest.php
index e4445024c..c1081304e 100644
--- a/tests/unit/gulliver/system/ReplaceDataFieldTest.php
+++ b/tests/unit/gulliver/system/ReplaceDataFieldTest.php
@@ -7,6 +7,7 @@ class ReplaceDataFieldTest extends TestCase
/**
* This checks that strings with HTML reserved characters are replaced with entities
* @test
+ * @covers G::replaceDataField
*/
public function it_should_replace_entities()
{
@@ -90,6 +91,7 @@ class ReplaceDataFieldTest extends TestCase
/**
* This checks that strings with HTML reserved characters are NOT replaced with entities
* @test
+ * @covers G::replaceDataField
*/
public function it_should_no_replace_entities()
{
@@ -175,6 +177,7 @@ class ReplaceDataFieldTest extends TestCase
* PS team sometimes build a HTML string to insert in templates (output documents or emails), Ex.- A table to list
* users or results from a query
* @test
+ * @covers G::replaceDataField
*/
public function it_should_no_replace_entities_if_exists_valid_html()
{
@@ -221,6 +224,7 @@ class ReplaceDataFieldTest extends TestCase
/**
* This checks that strings with tag
should not be replaced, because is a valid tag
* @test
+ * @covers G::replaceDataField
*/
public function it_should_no_replace_tag_br()
{
@@ -241,7 +245,7 @@ test
test");
$valuesToReplace = [];
$dbEngine = 'mysql'; // This only affects the way to escape the variables with "@@" prefix
- $applyEntities = true; // Is true because the string will b used in a output document or a email template
+ $applyEntities = true; // Is true because the string will be used in a output document or a email template
// Replace variables in the string
$stringToCheck = G::replaceDataField($stringWithTagBr, $valuesToReplace, $dbEngine, $applyEntities);
@@ -249,4 +253,28 @@ test");
// Assertions
$this->assertRegExp("/
/", $stringToCheck);
}
+
+ /**
+ * Check that the value for the System variable "__ABE__" should not be replaced never
+ * @test
+ * @covers G::replaceDataField
+ */
+ public function it_should_no_replace_entities_for_var_abe()
+ {
+ // Initializing variables to use
+ $string = "bla @#__ABE__ bla @#anotherVar bla";
+ $valuesToReplace = [// Add a value for reserved system variable "__ABE__" used in Actions By Email feature
+ '__ABE__' => 'Java < PHP', // The value for System variable "__ABE__" shouldn't be changed never
+ 'anotherVar' => '.NET < Java' // The value for another variables should be validated/replaced normally
+ ];
+ $dbEngine = 'mysql'; // This only affects the way to escape the variables with "@@" prefix
+ $applyEntities = true; // Is true because the string will be used in a output document or a email template
+
+ // Replace variables in the string
+ $stringToCheck = G::replaceDataField($string, $valuesToReplace, $dbEngine, $applyEntities);
+
+ // Assertions
+ $this->assertRegExp("/Java < PHP/", $stringToCheck);
+ $this->assertRegExp("/.NET < Java/", $stringToCheck);
+ }
}