List project files API returns malformed XML
closed
G
Gunmetal Otter
We are successfully using the project files API to find the files associated with a project
However, I noticed that in one of our projects, there is a room named "Bedroom & Ensuite 2".
When we fetch the files associated with this project, the resulting XML contains an element like the following:
<file id='...' url="..." name='XXXXXXXX - 1st Floor - Bedroom & Ensuite 2.jpg' date='1713956819' type='jpg' />
This is invalid, since ampersand (&) characters must be escaped in XML attributes, so our XML parser will not correctly parse this file name.
Please ensure your XML serialiser is configured correctly. Thank you.
Log In
G
Gray Harrier
Hey, sorry that we didn't get back to you on your follow-up question, but this is still a problem with the listfiles.php API. Is this endpoint still supported? If so, I think this should be fixed as it will be hard to parse XML files coming from the API, and it could even potentially be a source of string injection attacks.
Bernd Wolfram
closed
A
Anita Beqiri Lohaj
Gunmetal Otter Could you please let us know if you are experiencing the same issue with our new version of API here [https://app.swaggerhub.com/apis-docs/magicplan/magicplanCloudApi/1.2#/plans/listPlanFiles]? This will help us determine if the problem is isolated to the plan files or if it affects other parts of the system as well.
This post was marked as
planned
Susanne Reich
under review