[WW-3246] Optgroup Freemarker template desn't escape HTML

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.1.6
• Fix Version/s: 2.1.8
• Component/s: Other
• Assignee: Wes Wannemacher
• Reporter: Xavi Arias
• Created: 15/Sep/09 10:17
• Updated: 28/Oct/12 22:12
• Resolved: 21/Sep/09 15:55

Description

The actual code of optgroup.ftl in the simple theme renders ${tmpKeyStr}, should not be ${tmpKeyStr?html} as in select tags?

<#assign tmpKey=stack.findValue(optGroupInternalListUiBean.parameters.listKey) />
<#assign tmpValue=stack.findValue(optGroupInternalListUiBean.parameters.listValue) />
<#assign tmpKeyStr = tmpKey.toString() />
<option value="${tmpKeyStr}"
<#if tag.contains(parameters.nameValue, tmpKeyStr) == true>
selected="selected"
</#if>
>${tmpValue}
</option>