[JBoss JIRA] (GTNPORTAL-3436) Should not encode ampersand (&) in src attribute of html script tag
by Trong Tran (JIRA)
[ https://issues.jboss.org/browse/GTNPORTAL-3436?page=com.atlassian.jira.pl... ]
Trong Tran commented on GTNPORTAL-3436:
---------------------------------------
Hi [~rutlucas], could you please check if it's the case ?
> Should not encode ampersand (&) in src attribute of html script tag
> -------------------------------------------------------------------
>
> Key: GTNPORTAL-3436
> URL: https://issues.jboss.org/browse/GTNPORTAL-3436
> Project: GateIn Portal
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Reporter: Vu Viet Phuong
> Priority: Minor
>
> The bug was introduce by this commit https://github.com/gatein/gatein-portal/commit/b5b8eedf86733235f40d2161a7...
> {code}
> String amp = "&"
> gadgets.pubsubURL = hostName + '/js/gatein-container.js?c=1' + (debug ? amp + "debug=1": "") + (nocache ? amp +"nocache=1" : amp + "nocache=0");
> {code}
> pubsubURL will be loaded by js loader (requirejs) that build a script tag an put it in the html header.
> --> Script loading this way will not decode the "&" to "&" then server will receive "amp;debug" instead of "debug" parameter --> wrong parameter name on server
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
10 years, 1 month
- 1
- 0
[JBoss JIRA] (GTNPORTAL-3436) Should not encode ampersand (&) in src attribute of html script tag
by Vu Viet Phuong (JIRA)
Vu Viet Phuong created GTNPORTAL-3436:
-----------------------------------------
Summary: Should not encode ampersand (&) in src attribute of html script tag
Key: GTNPORTAL-3436
URL: https://issues.jboss.org/browse/GTNPORTAL-3436
Project: GateIn Portal
Issue Type: Bug
Security Level: Public (Everyone can see)
Reporter: Vu Viet Phuong
Priority: Minor
The bug was introduce by this commit https://github.com/gatein/gatein-portal/commit/b5b8eedf86733235f40d2161a7...
{code}
String amp = "&"
gadgets.pubsubURL = hostName + '/js/gatein-container.js?c=1' + (debug ? amp + "debug=1": "") + (nocache ? amp +"nocache=1" : amp + "nocache=0");
{code}
pubsubURL will be loaded by js loader (requirejs) that build a script tag an put it in the html header.
--> Script loading this way will not decode the "&" to "&" then server will receive "amp;debug" instead of "debug" parameter --> wrong parameter name on server
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
10 years, 1 month
- 1
- 0