Jonáš Trantina created RF-13221:
-----------------------------------
Summary: Incorrect XML encoding in AJAX response
Key: RF-13221
URL: https://issues.jboss.org/browse/RF-13221
Project: RichFaces
Issue Type: Bug
Security Level: Public (Everyone can see)
Affects Versions: 4.3.4
Reporter: Jonáš Trantina
Consider the following example:
<h:form>
<a4j:commandButton render="@form" value="rerender me"/>
<script src="path_to_some_script?param=asd&important=param"></script>
</h:form>
when commandButton is clicked, the form is rerendered and the response looks
like this:
<partial-response><changes><update id="someID"><![CDATA[
...
<script src="path_to_some_script?param=asd&important=param"></script>
]]</ ... >
But this is wrong. Because script tag is already in CDATA, so there is no need
for XML encoding for '&' entity.
This further causes script loading to fail (performed by jsf.js), whenever
parameters are needed (e.g. portal environment),
because script is downloaded from
""path_to_some_script?param=asd&important=param"
instead of ""path_to_some_script?param=asd&important=param".
Another very similar issue is when CDATA element is present in a re-rendered
fragment. Example:
<h:form>
<a4j:commandButton render="@form" value="rerender me"/>
<style type="text/css">
/* <![CDATA[ */
.somecssclass {...}
/* ]] */
</style>
</h:form>
The AJAX response then looks like so:
<partial-response><changes><update id="someID"><![CDATA[
...
<![CDATA[
...
]]
...
]]</ ... >
And this is incorrect XML, since CDATA cannot contain ']]', so the response is
discarded.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
richfaces-issues mailing list
[email protected]
https://lists.jboss.org/mailman/listinfo/richfaces-issues
