Re: [Squirrel-sql-users] HTML Rendering in Output Results Table - Security Issue?

[Gerd W. <ger...@t-...>]

On 16.11.2012 15:17, MandolinPlayer wrote:
> We have a situation where we have some fields returned that have HTML in
> them.  It appears SQL Quarreler is trying to render these columns
> because when I scroll to them, A, things hang up pretty badly, but there
> is color and font things going on in the row/column combinations with
> the HTML.  If I remove the HTML columns from the select statement, the
> hang ups no longer occur.
>
> A. Is this by design?  If so can we turn it off?
> B. Should we consider the security implications of rendering potentially
> untrusted code?

This is a bug. I just committed the fix. It will be available in the 
next snapshot.

Thanks again.

Gerd