On Mon, Jul 13, 2009 at 7:07 AM, Antonio Cuomo<[email protected]> wrote: > Dear Mark, it's the common behavior with all the DSpace installation i have > seen (MIT included). > > The problem is that all the data in the field dc.description are saved as > plain text for security issues.
I understand now, this is a discussion about Item metadata fields, not Community Collection descriptions where html content is allowed. I agree with Alan's assessment here: 1.) I really do not advise placing html content into metadata fields. this will cause much difficulty downstream in the application when those fields are rendered into things like <meta name="dc.description value="..."/> fields, oai records and other xml centric serializations 2.) Placing html into metadata fields suggests that they are more than content, but also presentation. Overall this is a very bad practice and I do not recommend doing it. If you do feel it necessary to approach doing this you might approach some of Patricks comments, but I will heavily caution that if the user inputs ill-formed xml, it will break the rendering pipeline and result in a 500 error page being rendered. The concern here is that the field value is parsed into the sax stream before the i18n and serialization transformations occur and thus needs to be well formed for those stages to occur. Another alternative might be to look at using JTidy to cleanup the value prior to having saxon or xalan parse it. See for instance http://scm.dspace.org/svn/repo/modules/dspace-rdf/trunk/src/main/java/org/dspace/adapters/rdf/DSpaceObjectAdapter.java Mark -- Mark R. Diggory @mire - http://www.atmire.com ------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/Challenge _______________________________________________ Dspace-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dspace-devel
