[ 
https://issues.apache.org/jira/browse/MYFACES-2811?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12887396#action_12887396
 ] 

Werner Punz commented on MYFACES-2811:
--------------------------------------

I guess this would be a discussion for the jsf-open list. The responseWriter 
per definition does not give the control away from the users hands
a double script tag for instance is per definition also not suppressed 
aka <script type="text/javascript"><script type="text/javascript"> can be 
rendered via startTag("script" twice

We had to fix this on the partial response writer level however because there 
the users control over the usage of CDATA has been taken away by nesting all 
the output of components into CDATA blocks already so a user might issue a 
valid cdata block in normal page rendering and yet still would break the xhr 
response protocol.





> Partial Response still embedded CDATA possible
> ----------------------------------------------
>
>                 Key: MYFACES-2811
>                 URL: https://issues.apache.org/jira/browse/MYFACES-2811
>             Project: MyFaces Core
>          Issue Type: Bug
>    Affects Versions: 2.0.1-SNAPSHOT
>            Reporter: Werner Punz
>
> We worked on this issue a while ago yet I got another error report in - Bruno 
> Aranda is reporting:
> Hi,
> I have a partial response that contains invalid syntax because CDATA
> sections are nested. For example, in my app this code is generated in
> the partial response:
> <?xml version="1.0"
> encoding="UTF-8"?><partialResponse><components><component><id>editorForm</id><output><![CDATA[<form
> id="editorForm" name="editorForm" method="post"
> action="/editor/curate/publication.jsf?conversationContext=2"
> enctype="application/x-www-form-urlencoded"><span
> id="growl"></span><script type="text/javascript">//<![CDATA[
> jQuery.gritter.add({title:'Publication saved',text:'AC:
> EBI-2637354',image:'/editor/primefaces_resource/2.0.3-SNAPSHOT/primefaces/growl/assets/info.png?conversationContext=2',sticky:false});
> //]]></script> 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to