[WICKET-642] Need to escape select html option value

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.2.4, 1.2.5, 1.2.6, 1.3.0-beta1
• Fix Version/s: 1.2.7, 1.3.0-rc1
• Component/s: wicket
• Environment: Any OS , tomcat server
• Assignee: Johan Compagner
• Reporter: swaroop belur
• Created: 13/Jun/07 06:03
• Updated: 30/Oct/07 23:33
• Resolved: 30/Oct/07 19:17

Description

Versions affectec : My version of wicket is 1.2.4 .However it is present even in the trunk as well.

Currently if option value contains double quotes in a dropdown choice,
the value got on the server side is empty string.

The method appendOptionHtml of AbstactChoice class does not
escape markup for option values as it does for display values.