[MASSEMBLY-378] Property expansion in assembly/component descriptors does not escape &, <, >, ", or '

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2-beta-2
• Fix Version/s: 2.2
• Assignee: John Dennis Casey
• Reporter: Owen Jacobson
• Created: 26/Dec/08 17:02
• Updated: 28/Sep/10 15:28
• Resolved: 24/Sep/10 11:18

Description

I have a home directory that, for reasons that are mostly uninteresting, has a & in it. Using ${basedir} in my projects' assembly descriptors causes the XML parser for the descriptor to complain about

[INFO] Error reading assemblies: Error reading descriptor at: src/main/assembly/examples.xml: Cannot read assembly descriptor from interpolating filter of serialized version.

entity reference names can not start with character ' ' (position: START_TAG seen ...<directory>/Volumes/Network Users & ... @7:43)

This seems to also be true for any other XML-magic character (any from the set &, <, >, ", or ').

Attached is a zip of a minimal project that demonstrates the problem (even if your $HOME doesn't have & in it) way, buildable with mvn package.