[ 
http://opensource.atlassian.com/projects/roller/browse/ROL-1397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_13899
 ] 

Anil Gangolli commented on ROL-1397:
------------------------------------


Note that APP doesn't mandate a particular charset.  Some character encodings 
may have null bytes as part of normal content.   

We could address this if we restrict the encoding to UTF-8, which may be an 
implicit requirement of the current implementation anyway.  I may be missing 
something, but it seems like it  could get  ugly to try to be resilient to this 
client bug on the receiving end.

> APP interop: null byte 0x0 getting into entry contents
> ------------------------------------------------------
>
>                 Key: ROL-1397
>                 URL: 
> http://opensource.atlassian.com/projects/roller/browse/ROL-1397
>             Project: Roller
>          Issue Type: Bug
>          Components: Web Services
>            Reporter: David Johnson
>            Assignee: David Johnson
>
> Some clients (the APE and Joe Gregorio's WXPython client) see to inject null 
> bytes into APP entry content. Not sure if this is a client side or a JDOM 
> issue. Either way, we need to sanitize input to remove bad characters and 
> ensure well-formed HTML or XHTML.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://opensource.atlassian.com/projects/roller/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to