From jira-events at lists.jboss.org Wed Sep 25 06:37:46 2013
Content-Type: multipart/mixed; boundary="===============2658155017337796321=="
MIME-Version: 1.0
From: =?utf-8?q?Jon=C3=A1=C5=A1_Trantina_=28JIRA=29_=3Cjira-events_at_lists=2Ej?=
 =?utf-8?q?boss=2Eorg=3E?=
To: richfaces-issues at lists.jboss.org
Subject: [richfaces-issues] [JBoss JIRA] (RF-13221) Incorrect XML encoding in
 AJAX response
Date: Wed, 25 Sep 2013 06:37:45 -0400
Message-ID: <JIRA.12501466.1380105464201.3422.1380105465871@jira02.app.mwc.hst.phx2.redhat.com>
In-Reply-To: JIRA.12501466.1380105464201@jira02.app.mwc.hst.phx2.redhat.com

--===============2658155017337796321==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

Jon=C3=A1=C5=A1 Trantina created RF-13221:
-----------------------------------

             Summary: Incorrect XML encoding in AJAX response
                 Key: RF-13221
                 URL: https://issues.jboss.org/browse/RF-13221
             Project: RichFaces
          Issue Type: Bug
      Security Level: Public (Everyone can see)
    Affects Versions: 4.3.4
            Reporter: Jon=C3=A1=C5=A1 Trantina


Consider the following example:
<h:form>
<a4j:commandButton render=3D"@form" value=3D"rerender me"/>

<script src=3D"path_to_some_script?param=3Dasd&amp;important=3Dparam"></scr=
ipt>

</h:form>

when commandButton is clicked, the form is rerendered and the response look=
s like this:
<partial-response><changes><update id=3D"someID"><![CDATA[
   ...
  <script src=3D"path_to_some_script?param=3Dasd&amp;important=3Dparam"></s=
cript>
]]</ ... >

But this is wrong. Because script tag is already in CDATA, so there is no n=
eed for XML encoding for '&' entity.
This further causes script loading to fail (performed by jsf.js), whenever =
parameters are needed (e.g. portal environment), =

because script is downloaded from ""path_to_some_script?param=3Dasd&amp;imp=
ortant=3Dparam" =

instead of ""path_to_some_script?param=3Dasd&important=3Dparam".

Another very similar issue is when CDATA element is present in a re-rendere=
d fragment. Example:
<h:form>
<a4j:commandButton render=3D"@form" value=3D"rerender me"/>

<style type=3D"text/css">
/* <![CDATA[ */
      .somecssclass {...}
/* ]] */
</style>

</h:form>

The AJAX response then looks like so:
<partial-response><changes><update id=3D"someID"><![CDATA[
...
   <![CDATA[
      ...
  ]]
...
]]</ ... >

And this is incorrect XML, since CDATA cannot contain ']]', so the response=
 is discarded.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira


--===============2658155017337796321==--