Thanks for letting me know about this. This was actually a bug I fixed last year, but I accidentally "unfixed" it recently when I fixed a different bug that occurred with backslashes in the user or role name.
This will be fixed in the next release. I don't have a workaround at the moment, but if you want to update the source code to get the fix right away, here are the changes:
gs\pages\admin\manageusers.ascx.cs: Find the following two javascript functions and replace with this:
Code:function getUserName(dataItem)
{{
var userName = dataItem.getMember('UserName').get_value();
// Escape quotes, apostrophes and back slashes. Replace encoded < symbol (#%cLt#%) caused by CA with <
return encodeURI(userName.replace(/""/g, '\\\""').replace(/\\/g, '\\\\').replace(/\'/g, ""\\'"").replace(/#%cLt#%/g, '<'));
}}
function getUserNameNoEncode(dataItem)
{{
var userName = dataItem.getMember('UserName').get_value();
// Escape quotes, apostrophes and back slashes
return userName.replace(/""/g, '\\\""').replace(/\\/g, '\\\\').replace(/\'/g, ""\\'"");
}}
gs\pages\admin\manageroles.ascx.cs: Find the following two javascript functions and replace with this:
Code:function getRoleName(dataItem)
{{
var roleName = dataItem.getMember('RoleName').get_value();
// Escape quotes, apostrophes and back slashes. Replace encoded < symbol (#%cLt#%) caused by CA with <
return encodeURI(roleName.replace(/""/g, '\\\""').replace(/\\/g, '\\\\').replace(/\'/g, ""\\'"").replace(/#%cLt#%/g, '<'));
}}
function getRoleNameNoEncode(dataItem)
{{
var roleName = dataItem.getMember('RoleName').get_value();
// Escape quotes, apostrophes and back slashes
return roleName.replace(/""/g, '\\\""').replace(/\\/g, '\\\\').replace(/\'/g, ""\\'"");
}}
Roger Martin
Creator and Lead Developer of Gallery Server Pro