[jira] Created: (DOXIA-362) Entities in attribute values are not escaped

[Lukas Theussl (JIRA)]

Entities in attribute values are not escaped
--------------------------------------------

                 Key: DOXIA-362
                 URL: http://jira.codehaus.org/browse/DOXIA-362
             Project: Maven Doxia
          Issue Type: Bug
          Components: Core, Module - Fml, Module - Xdoc, Module - Xhtml
    Affects Versions: 1.1
            Reporter: Lukas Theussl


xdoc source:

{code:xml}
<a 
href="http://example.com/example.html?version=latest&amp;login=example";>link</a>
<img src="http://example.com/example.jpg?version=latest&amp;login=example"; 
alt="image"/>
<script type="text/javascript" 
src="http://example.com/example.js?version=latest&amp;login=example";></script>
{code}

result:

{code:xml}
<a href="http://example.com/example.html?version=latest&amp;login=example"; 
class="externalLink">link</a>
<img src="http://example.com/example.jpg?version=latest&login=example"; 
alt="image" />
<script type="text/javascript" 
src="http://example.com/example.js?version=latest&login=example";></script>
{code}

ie for the <script> and <img> src attribute, the ampersand gets un-escaped. The 
reason is that the plexus MXParser (correctly) normalizes attribute values, but 
the XhtmlBaseSink doesn't re-escape them.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira