Hello,

On 08/16/2010 08:11 PM, Andrea Belli wrote:
> Hello,
>   I play a little with the Rss Code pages and I found a solution.
>   I modified the line
> 252:     <dc:creator>$escapetool.xml($xwiki.getUserName($entryDoc.creator, 
> false))</dc:creator>
> 
> In
> 252:     <dc:creator>$xwiki.getUserName($entryDoc.creator, false)</dc:creator>
> 
> And now the feed is shown correctly.
> I also made a similar change on the pdffooter.vm script (removing the 
> escapetool.xml invocation) and now the problem related stressed characters 
> seems to be solved.
> 
> I've only a question: what is the scope of escapetool.xml function? Probably 
> I solved my problem now but.. I'll pay the consequences in the future?
> 
Removing XML-escaping makes you vulnerable to XSS (cross-site-scripting)
attacks.  But the fact that escapetool escapes too much no matter what
encoding is used is indeed not nice.


Alex

> Andrea
> 
> -----Messaggio originale-----
> Da: [email protected] [mailto:[email protected]] Per conto di 
> Andrea Belli
> Inviato: giovedì 5 agosto 2010 15:33
> A: XWiki Users
> Oggetto: [xwiki-users] R: user name with stressed characters is encoded as 
> XML entity
> 
> I missed something: I'using XE 2.4 release.
> Regards
> Andrea
> 
> -----Messaggio originale-----
> Da: [email protected] [mailto:[email protected]] Per conto di 
> Andrea Belli
> Inviato: giovedì 5 agosto 2010 10:39
> A: [email protected]
> Oggetto: [xwiki-users] user name with stressed characters is encoded as XML 
> entity
> 
> Hi,
>   I have user name with stressed character as è, é, à.. .
>   I noticed that when they publish a post on the blog application, the 
> associated rss feed contains the dc-creator tag with XML encoded entities in 
> this way:
> 
> <dc:creator>Julian Den&amp;#224;</dc:creator>
> 
> Is there a way to modify this behavior (many rss viewers do not parse the 
> entities L )?
> 
> A similar thing happens when I export a PDF document: the author of the page 
> is correct on the HTML page of the wiki document (on the HTML script I have
> 
> Last modified by <span class="wikilink"><a 
> href="/wiki/bin/view/XWiki/dena">Julian Denà</a></span>
> )
> 
> but on the PDF document I've the XML encoded entity.
> 
> Thank you in advance for your help.
> Best Regars,
> Andrea
> 
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.xwiki.org/mailman/listinfo/users
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.xwiki.org/mailman/listinfo/users
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.xwiki.org/mailman/listinfo/users
> 
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users

Reply via email to