Uploaded image for project: 'MyFaces Core'
  1. MyFaces Core
  2. MYFACES-3007

HtmlRendererUtils: incorrect handling of JavaScript code containing quote (' " ') symbol

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.0.3
    • 2.0.4
    • JSR-314
    • None

    Description

      Compare behavior of the following code in Mojarra & MyFaces:

      <h:commandLink onclick="var foo = " \" test "; alert(foo);">
      Test
      <f:ajax />
      </h:commandLink>

      In Mojarra alert(...) is called, in MyFaces script error occurs

      Attachments

        Activity

          People

            lu4242 Leonardo Uribe
            nbelaevski Nick Belaevski
            Votes:
            1 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: