Uploaded image for project: 'Maven Doxia Sitetools'
  1. Maven Doxia Sitetools
  2. DOXIASITETOOLS-300

Don't populate Velocity context with XML entities

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.0.0-M6
    • 2.0.0-M7, 2.0.0
    • Site renderer
    • None

    Description

      With MSITE-226 and MSKINS-222 we need to escape values to avoid syntax errors. The SiteRenderer should not assume that target is XML/HTML. No premature escaping. It is the task of the view layer to properly escape content.

      When done, we will have double escaping, thus broken output.

      Attachments

        Issue Links

          Activity

            People

              michael-o Michael Osipov
              michael-o Michael Osipov
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: