Should not encode ampersand (&) in src attribute of html script tag ------------------------------------------------------------------- Key: GTNPORTAL-3436 URL: https://issues.jboss.org/browse/GTNPORTAL-3436 Project: GateIn Portal Issue Type: Bug Security Level: Public(Everyone can see) Reporter: Vu Viet Phuong Priority: Minor The bug was introduce by this commit https://github.com/gatein/gatein-portal/commit/b5b8eedf86733235f40d2161a7... {code} String amp = "&" gadgets.pubsubURL = hostName + '/js/gatein-container.js?c=1' + (debug ? amp + "debug=1": "") + (nocache ? amp +"nocache=1" : amp + "nocache=0"); {code} pubsubURL will be loaded by js loader (requirejs) that build a script tag an put it in the html header. --> Script loading this way will not decode the "&" to "&" then server will receive "amp;debug" instead of "debug" parameter --> wrong parameter name on server