Filemin editor is evaluating entity encodings in most recent filemin versions

Webmin
1
SYSTEM INFORMATION
OS type and version RHEL 7.9 and Rocky Linux 9.2
Webmin version 2.102

We write a lot of perl scripts.
Here’s a snip of code in one of our scripts. In webmin version 2.021,
said code looks like:
sub cmXmlSafeEncode {
my ( $paramString ) = @_;

    $paramString =~ s/[&]/\&/gm;
    $paramString =~ s/[<]/\&lt;/gm;
    $paramString =~ s/[>]/\&gt;/gm;

    return $paramString;

};

Within webmin version 2.102 it looks like:
sub cmXmlSafeEncode {
my ( $paramString ) = @_;

$paramString =~ s/[&]/\&/gm;
$paramString =~ s/[<]/\</gm;
$paramString =~ s/[>]/\>/gm;

return $paramString;

};

Doesn’t matter the context. It looks like some kind of change was made to the module that causes it to evaluate this sort of thing and decode it. Question 1. Is there a configuration change that I can personally make to get it to stop this behavior? If no, is this how it will be moving forward or can this behavior be corrected so it doesn’t do that?

Thanks in advance!!

1 Like