DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=34628>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=34628

           Summary: html:multibox does not mark input status as checked when
                    HTML sensitive characters are present in value.
           Product: Struts
           Version: 1.2.4
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Custom Tags
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


I set two attributes in reqeuest from my Struts Action, one is called
"allEventTypes" which contains a String array.  Each element is a value for an
event type in my application.

The other is called "selectedEventTypes" which is again a String array.  Each
element is a value representing what event types in my application has been
checked by the user.

I use the following in my JSP to display all the events and which ones have been
checked by a user.

<logic:iterate id="eventType" property="allEventTypes">
    <html:multibox property="selectedEventTypes">
        <bean:write name="eventType"/>
    </html:multibox>
    <bean:write name="eventType"/>
</logic:iterate>

This however fails to check any of the event values that contain HTML sensitive
characters like ' < > & or even leading and trailing white space.

It appears that the constant member in org.apache.struts.taglib.html.MultiboxTag
has been initialised with all HTML sensitive characters filterd to be for
example & to &amp;.  And all leading and trailing white space has been removed.

When the comparison is done though on line 214 to see if the input box should be
checked the values local varivale that contain all the selected values still
have HTML sensitive characters in.

Two ways to fix this are not filtering the HTML characters in the constant
member or also filtering the values array that contains all the selected values
to remove all HTML senstive characters.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to