https://issues.apache.org/bugzilla/show_bug.cgi?id=56265
--- Comment #3 from Konstantin Kolinko <knst.koli...@gmail.com> --- Thus far: 1. It is reproducible with the current trunk The following line numbers are from debugging the reproducer with current trunk @1577714. 2. 'setDynamicAttribute(' is written out at Generator$GenerateVisitor.generateSetters(...) at Generator.java L3098 At this point attrs[i].getValue() is already "window.alert('Hello ${world}!')" 3. The escaping happens when creating Node.JspAttribute. That is in Validator$ValidateVisitor.getJspAttribute(...) at Validator.java L1379 The code there originates from r1539173 Apparently the goal of r1539173 was to apply xml escaping to attributes in UninterpretedTag nodes, but it was applied to any tag attributes containing EL expressions. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org