Dear Wolfgang,

The HTML Living Standard allows the greater than sign inside single or double quoted attribute values, so i would regard the old behavior as a bug (i think to remember
that at a certain time, one had to use entities for these).

With the change, all old test continue to work, although the testing set
is not very extensive. Please test.

https://bitbucket.org/naviserver/naviserver/commits/6f7b322d0f45daa2154d702ca763442bb2be9fac

all the best from Maui,

-gustaf

On 04.01.23 15:19, Wolfgang Winkler via naviserver-devel wrote:

Hello!

When we try to use custom tags with attributes, we encounter a problem when passing html strings, e.g:

proc::dummy_tag_proc {params} {
return[ns_set array$params]
}
ns_adp_registerscript dummy_tag ::dummy_tag_proc

<dummy_tag title="<i class='fal fa-link'></i>">

Outputs:

title {"<i class='fal fa-icon'>}

Everything after the first ">" is truncated. Is there a safe way to prevent this behaviour?

Regards,

Wolfgang

--

*Wolfgang Winkler*
Geschäftsführung
wolfgang.wink...@digital-concepts.com
mobil +43.699.19971172

dc:*büro*
digital concepts Novak Winkler OG
Software & Design
Landstraße 68, 5. Stock, 4020 Linz
www.digital-concepts.com <http://www.digital-concepts.com>
tel +43.732.997117.72
tel +43.699.1997117.2

Firmenbuchnummer: 192003h
Firmenbuchgericht: Landesgericht Linz




_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel

--
Univ.Prof. Dr. Gustaf Neumann
Head of the Institute of Information Systems and New Media
of Vienna University of Economics and Business
Program Director of MSc "Information Systems"
_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel

Reply via email to