[SCXML-76] Serialization of expressions may produce invalid XML

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.8
• Fix Version/s: 0.9
• Assignee: Unassigned
• Reporter: Ingmar Kliche
• Created: 15/Jul/08 13:14
• Updated: 30/Jul/08 16:59
• Resolved: 28/Jul/08 21:47

Description

The SCXMLSerializer does not escape expression strings. With an EcmaScript evaluator the following may occur:

original document:
<transition event="foo" cond="i < 3" target="bar">

the serialized document will be:
<transition event="foo" cond="i < 3" target="bar">

which is ill-formed XML. The serializer would need to escape the condition string. This applies to all places where expressions may occur.

Apache commons-lang has a StringEscapeUtil.escapeXML(String data) function which would solve the problem (I don't know if it would help for all cases).

http://svn.apache.org/viewvc/commons/proper/lang/trunk/src/java/org/apache/commons/lang/StringEscapeUtils.java?view=markup

But using this would add another dependency to commons-scxml.