Hi Guys, I am very new to Dspace, I am using ubuntu 9.4, my aim is to install
dspace 1.5.2 on ubuntu desktop box please help me i tried the online manual
without success.
-----Original Message-----
From: Antonio Cuomo [mailto:anto...@parliaments.info]
Sent: Mon 7/13/2009 4:07 PM
To: Mark Diggory
Cc: dspace-tech; dspace-de...@lists.sourceforge.net
Subject: Re: [Dspace-tech] [Dspace-devel] [Dspace-general] show HTML data
Dear Mark, it's the common behavior with all the DSpace installation i have
seen (MIT included).
The problem is that all the data in the field dc.description are saved as
plain text for security issues.
so the data must to be reconverted in html before being pushed to the UI.
so, do you know what is the java class that retrieve the information from
the database and pass it to the UI?
thank you very much
Antonio
On Mon, Jul 13, 2009 at 9:16 AM, Mark Diggory <mdigg...@atmire.com> wrote:
> Antonio,
>
> It is unclear why your case is not working. I can assure you that a
> default installation of DSpace Manakin XMLUI will allow you to place
> html in the form fields for any Community/Collection and that will
> render as HTML in the Community/collection views without being
> escaped, this is expected behavior. IT shouldn't require altering the
> xslt templates to correct for your problem, there is apparently
> something else going wrong with your installation. HTML escaping is
> not used when the content is stored in the database, it is stored as
> plain old unescaped html text. I suspect that there is something
> concerning your environment different from a typical default
> installation running on tomcat/linux that is giving rise to this
> problem.
>
> > the "problem" that the data inside the database are saved as text and
> > special character are added to avoid SQL-injection
>
> Are you running some sort of sql-injection filtering in-front of DSpace?
>
> Mark
>
> --
> Mark R. Diggory
> @mire - http://www.atmire.com
>
> On Sat, Jul 11, 2009 at 3:33 AM, Antonio Cuomo<anto...@parliaments.info>
> wrote:
> > Dear Mark, thank you for your reply,
> >
> > unfortunately i didn't worked.
> >
> > The problem is:
> > cocoon throught a java class take the data from the data base and pass
> them
> > directly to manakin without any change.
> >
> > manakin build up the layout the sent it to the browser with the data
> cocoon
> > passed
> >
> >
> > the "problem" that the data inside the database are saved as text and
> > special character are added to avoid SQL-injection
> > so if i write:
> > <h3> Ciao <h3> <br/> <p> forever</p>
> >
> > the data appears in the data base in this way
> >
> > <h3>Ciao</h3> <br/> <p>for ever <p>
> >
> > and so what the browser receive is
> >
> > <h3>Ciao</h3> <br/> <p>for ever <p>
> >
> > that is visualized as
> > <h3> Ciao <h3> <br/> <p> forever</p>
> >
> > what i need is to decode this special carachers < and > in < and
> >
> >
> > to do this i can try to modify the xsl DIM-Handler (do u know how?)
> >
> > or the java cocoon class (do you know witch one and how?)
> >
> > Thank you very much
> > Antonio
> >
> >
> > On Sat, Jul 11, 2009 at 3:02 AM, Mark Diggory <mdigg...@atmire.com>
> wrote:
> >>
> >> Use well formed xml here and try to wrap content with a <div> or <p>
> >> tag and it should work better for you. You shouldn't require
> >> alteration of the xslt for this.
> >>
> >> <div>
> >> <h3> hello </h3>
> >> <p>it is a description </p>
> >> </div>
> >>
> >> Mark
> >>
> >> --
> >> Mark R. Diggory
> >> @mire - http://www.atmire.com
> >>
> >> 2009/7/10 Antonio Cuomo <anto...@parliaments.info>:
> >> > dear D-Space developer/user
> >> >
> >> > i have a question:
> >> >
> >> > i have some html code in my Database in the description field, of
> course
> >> > the
> >> > html have been transformed in plain text.
> >> > so the database entry is:
> >> > <h3> hello </h3> </br><p>it is a description <p>
> >> >
> >> > when DSpace shows the database content it actually shows the text:
> >> > <h3> hello </h3> </br><p>it is a description <p>
> >> >
> >> > while i wuold like to say the html resoults instead:
> >> >
> >> > hello
> >> > it is a description
> >> >
> >> >
> >> >
> >> > How can i do it?
> >> >
> >> > i see two possibilities:
> >> >
> >> > - Overwrite the java class that take data from the database and send
> >> > them
> >> > to manakin in order to decode the html
> >> >
> >> >
> >> > - working at Mankin level(but it seems me pretty much more
> >> > complicated):in
> >> > the file DIM-Handler.xsl
> >> >
> >> > <xsl:if test="dim:fie...@element='description' and not(@qualifier)]">
> >> > ...
> >> > <xsl:copy-of select="./node()"/> <-- call
> >> > some
> >> > html decoder here
> >> > ...
> >> > </xsl:if>
> >> >
> >> >
> >> > I'm sure i'm not the first one who had this need... and i can see some
> >> > security issues concerned with the solution
> >> > can somebody give me some indication or "a solution"?
> >> >
> >> > Thank you very much
> >> > Antonio
> >> >
> >> >
> >> > _______________________________________________
> >> > Dspace-general mailing list
> >> > dspace-gene...@mit.edu
> >> > http://mailman.mit.edu/mailman/listinfo/dspace-general
> >> >
> >> >
> >>
> >>
> >>
> ------------------------------------------------------------------------------
> >> Enter the BlackBerry Developer Challenge
> >> This is your chance to win up to $100,000 in prizes! For a limited time,
> >> vendors submitting new applications to BlackBerry App World(TM) will
> have
> >> the opportunity to enter the BlackBerry Developer Challenge. See full
> >> prize
> >> details at: http://p.sf.net/sfu/Challenge
> >> _______________________________________________
> >> Dspace-devel mailing list
> >> dspace-de...@lists.sourceforge.net
> >> https://lists.sourceforge.net/lists/listinfo/dspace-devel
> >
> >
>
<html><p><font face = "verdana" size = "0.8" color = "navy">This communication
is intended for the addressee only. It is confidential. If you have received
this communication in error, please notify us immediately and destroy the
original message. You may not copy or disseminate this communication without
the permission of the University. Only authorized signatories are competent to
enter into agreements on behalf of the University and recipients are thus
advised that the content of this message may not be legally binding on the
University and may contain the personal views and opinions of the author, which
are not necessarily the views and opinions of The University of the
Witwatersrand, Johannesburg. All agreements between the University and
outsiders are subject to South African Law unless the University agrees in
writing to the contrary.</font></p></html>
------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize
details at: http://p.sf.net/sfu/Challenge
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
