Version 4.1.2

system/Helpers/Form/Member.php

@@ -51,7 +51,8 @@ class _Member extends Text
 			'source' 				=>	'app=core&module=system&controller=ajax&do=findMember',
 			'resultItemTemplate' 	=> 'core.autocomplete.memberItem',
 			'unique'				=> true,
-			'minAjaxLength'			=> 3
+			'minAjaxLength'			=> 3,
+			'disallowedCharacters'  => array()
 		);
 		if( isset( $args[3] ) and array_key_exists( 'multiple', $args[3] ) and $args[3]['multiple'] > 0 )
 		{
@@ -87,7 +88,9 @@ class _Member extends Text
 			$value = $value->name;
 		}
 		
-		return \IPS\Theme::i()->getTemplate( 'forms', 'core', 'global' )->text( $this->name, 'text', $value, $this->required, $this->options['maxLength'], $this->options['size'], $this->options['disabled'], $this->options['autocomplete'], $this->options['placeholder'], NULL, NULL );
+		/* 10/19/15 - adding htmlspecialchars around value if autocomplete is enabled so that html tag characters can be used (e.g. for members) */
+		/* This value is decoded by the JS widget before use. See https://community.invisionpower.com/4bugtrack/active-reports/cannot-pm-certain-members-r6181/ */
+		return \IPS\Theme::i()->getTemplate( 'forms', 'core', 'global' )->text( $this->name, 'text', ( $this->options['autocomplete'] ? htmlspecialchars( $value, ENT_QUOTES | \IPS\HTMLENTITIES, 'UTF-8', FALSE ) : $value ), $this->required, $this->options['maxLength'], $this->options['size'], $this->options['disabled'], $this->options['autocomplete'], $this->options['placeholder'], NULL, NULL );
 	}
 	
 	/**