[WICKET-5242] Disable escaping of html tag attributes

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Cannot Reproduce
• Affects Version/s: 6.7.0
• Component/s: wicket
• Labels: escaping html tags
• Assignee: Unassigned
• Reporter: Bertrand Guay-Paquet
• Created: 19/Jun/13 14:09
• Updated: 20/Mar/14 15:57
• Resolved: 12/Jul/13 13:25

Description

Currently, all component tag attributes are escaped.With html5 data- attributes, much more values can be considered valid depending on the tag attribute and some should not be escaped.

For example, bootstrap tooltips use the "data-title" attribute to set the content of a tooltip. Using Wicket's tag attributes, it's not possible to set the value "<b>hello world</b>" as the data-title since it is escaped.

ComponentTag#writeOutput() is the method which calls Strings.escapeMarkup(value); and escapes tag values. This is called by Component#renderComponentTag().

There should be a way to disable component tag escaping either per-tag or per-component.

Reference email thread:
http://apache-wicket.1842946.n4.nabble.com/AttributeModifier-with-html-in-the-attribute-tp4659206.html

Issue Links

• is related to: WICKET-2829 Tag attributes values are not escaped properly during writeOutput