https://issues.apache.org/bugzilla/show_bug.cgi?id=56265

--- Comment #3 from Konstantin Kolinko <knst.koli...@gmail.com> ---
Thus far:

1. It is reproducible with the current trunk

The following line numbers are from debugging the reproducer with current trunk
@1577714.

2. 'setDynamicAttribute(' is written out at
Generator$GenerateVisitor.generateSetters(...) at Generator.java L3098

At this point attrs[i].getValue() is already
"window.alert(&#039;Hello ${world}!&#039;)"

3. The escaping happens when creating Node.JspAttribute.
That is in Validator$ValidateVisitor.getJspAttribute(...) at Validator.java
L1379

The code there originates from r1539173

Apparently the goal of r1539173 was to apply xml escaping to attributes in
UninterpretedTag nodes, but it was applied to any tag attributes containing EL
expressions.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to