Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 2.0-Alpha2
-
Fix Version/s: 2.0-Alpha3, 2.0.0
-
Component/s: Framework
-
Labels:None
-
Environment:ICEfaces
Description
DOMUtils.printNode is used for DOM output and makes use of escapeAnsi for XML/HTML attribute values. This produces valid output, but is overly zealous and escapes characters that do not need to be escaped for double quoted "" attribute values. In particular, the single quote character is legal, but was being escaped as '.
Issue Links
- depends on
-
ICE-3182
DOMResponseWriter.writeText() escaping
-
- Closed
-
Activity
- All
- Comments
- History
- Activity
- Remote Attachments
- Subversion
Judy, please test against the mojarra tests and then assign to Ken to confirm whether we have unicode and internationalization tests that are suitable.
Show
Ted Goddard
added a comment - Judy, please test against the mojarra tests and then assign to Ken to confirm whether we have unicode and internationalization tests that are suitable.
ICE-3182 to resolve this, needs to be verified once it is fixed.
The escapeAttribute() implementation assumes that the attribute value is surrounded by double quotes ("). This implementation escapes only the require values as defined by the XML specification. This must be tested with unicode characters in existing browsers. (For instance, the ascii DEL character is valid XML, but may not be accepted by some browsers. Additionally, unicode values are now being written directly in an assumed UTF-8 encoding, so this may cause incompatibility.