ICEfaces
  1. ICEfaces
  2. ICE-10980

JSF h:selectOneListbox, h:selectOneMenu components not escaping HTML text in labels

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Won't Fix
    • Affects Version/s: EE-3.3.0.GA_P03, 4.1.1
    • Fix Version/s: EE-3.3.0.GA_P05, 4.3
    • Component/s: Framework
    • Labels:
      None
    • Environment:
      All
    • Assignee Priority:
      P2
    • Support Case References:
    • Workaround Exists:
      Yes
    • Workaround Description:
      Workaround for this issue is to use the ice:selectOneListbox or ice:selectOneMenu components instead of the h: ones as they do not have this issue.

      Description

      With the standard JSF components (h:selectOneListbox, h:selectOneMenu), the backing select item list is not escaping html characters. The same is escaped correctly when using the ice:selectOneListbox/selectOneMenu.

      It is also escaping correctly when using a pure JSF sample. When ICEfaces is added, it displays the label like it uses escape=false.

      Sample code:
                  <h:selectOneListbox value="#{testBean.id1}" size="4">
                      <f:selectItems value="#{testBean.items}"/>
                  </h:selectOneListbox>
      List items:
      "hello"
      "hello <world"
      "8 > 3"
      "9 = 9"

      With ICEfaces shows list as:
      "hello"
      "hello "
      "8 > 3"
      "9 = 9"

      Pure JSF and ICE comps show list as:
      "hello"
      "hello <world"
      "8 > 3"
      "9 = 9"

        Activity

          People

          • Assignee:
            Arturo Zambrano
            Reporter:
            Arran Mccullough
          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: