[CLK-674] Escape control values as xml entities instead of html

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.3.0-M1
• Component/s: core
• Assignee: Bob Schellink
• Reporter: Bob Schellink
• Created: 13/May/10 08:28
• Updated: 05/Jul/10 09:38
• Resolved: 05/Jul/10 09:38

Description

Click escapes Control values and attributes using HTML entities, which doesn't play nice when returning XML payloads for Ajax requests.

I suggest we only escape dangerous HTML characters > < " ' &, with the option of switching escaping off.

Is there any reason to escape all HTML entities?

PS: Apostrophe should be escaped as "& #039;" not "& apos;". apos is not a valid HTML entity