[jira] Closed: (DOXIA-362) Entities in attribute values are not escaped

[Lukas Theussl (JIRA)]

     [ 
http://jira.codehaus.org/browse/DOXIA-362?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Lukas Theussl closed DOXIA-362.
-------------------------------

         Assignee: Lukas Theussl
       Resolution: Fixed
    Fix Version/s: 1.1.2

Fixed in [r806492|http://svn.apache.org/viewvc?view=rev&revision=806492]

> Entities in attribute values are not escaped
> --------------------------------------------
>
>                 Key: DOXIA-362
>                 URL: http://jira.codehaus.org/browse/DOXIA-362
>             Project: Maven Doxia
>          Issue Type: Bug
>          Components: Core, Module - Fml, Module - Xdoc, Module - Xhtml
>    Affects Versions: 1.1
>            Reporter: Lukas Theussl
>            Assignee: Lukas Theussl
>             Fix For: 1.1.2
>
>
> xdoc source:
> {code:xml}
> <a 
> href="http://example.com/example.html?version=latest&amp;login=example";>link</a>
> <img src="http://example.com/example.jpg?version=latest&amp;login=example"; 
> alt="image"/>
> <script type="text/javascript" 
> src="http://example.com/example.js?version=latest&amp;login=example";></script>
> {code}
> result:
> {code:xml}
> <a href="http://example.com/example.html?version=latest&amp;login=example"; 
> class="externalLink">link</a>
> <img src="http://example.com/example.jpg?version=latest&login=example"; 
> alt="image" />
> <script type="text/javascript" 
> src="http://example.com/example.js?version=latest&login=example";></script>
> {code}
> ie for the <script> and <img> src attribute, the ampersand gets un-escaped. 
> The reason is that the plexus MXParser (correctly) normalizes attribute 
> values, but the XhtmlBaseSink doesn't re-escape them.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira