From jira-events at lists.jboss.org Thu Sep 26 11:55:02 2013
Content-Type: multipart/mixed; boundary="===============3115417234234332622=="
MIME-Version: 1.0
From: Brian Leathem (JIRA) <jira-events at lists.jboss.org>
To: richfaces-issues at lists.jboss.org
Subject: [richfaces-issues] [JBoss JIRA] (RF-13221) Incorrect XML encoding in
 AJAX response
Date: Thu, 26 Sep 2013 11:55:02 -0400
Message-ID: <JIRA.12501466.1380105464000.2508.1380210902696@jira02.app.mwc.hst.phx2.redhat.com>
In-Reply-To: JIRA.12501466.1380105464000@jira02.app.mwc.hst.phx2.redhat.com

--===============3115417234234332622==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable


     [ https://issues.jboss.org/browse/RF-13221?page=3Dcom.atlassian.jira.p=
lugin.system.issuetabpanels:all-tabpanel ]

Brian Leathem updated RF-13221:
-------------------------------

    Labels: waiting_on_user  (was: )

    =

> Incorrect XML encoding in AJAX response
> ---------------------------------------
>
>                 Key: RF-13221
>                 URL: https://issues.jboss.org/browse/RF-13221
>             Project: RichFaces
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) =

>    Affects Versions: 4.3.4
>            Reporter: Jon=C3=A1=C5=A1 Trantina
>              Labels: waiting_on_user
>
> Consider the following example:
> {noformat}
> <h:form>
> <a4j:commandButton render=3D"@form" value=3D"rerender me"/>
> <script src=3D"path_to_some_script?param=3Dasd&amp;important=3Dparam"></s=
cript>
> </h:form>
> {noformat}
> when commandButton is clicked, the form is rerendered and the response lo=
oks like this:
> {noformat}
> <partial-response><changes><update id=3D"someID"><![CDATA[
>    ...
>   <script src=3D"path_to_some_script?param=3Dasd&amp;important=3Dparam"><=
/script>
> ]]</ ... >
> {noformat}
> But this is wrong. Because script tag is already in CDATA, so there is no=
 need for XML encoding for '&' entity.
> This further causes script loading to fail (performed by jsf.js), wheneve=
r parameters are needed (e.g. portal environment), =

> because script is downloaded from {noformat}"path_to_some_script?param=3D=
asd&amp;important=3Dparam" {noformat}
> instead of {noformat}"path_to_some_script?param=3Dasd&important=3Dparam"{=
noformat}.
> Another very similar issue is when CDATA element is present in a re-rende=
red fragment. Example:
> {noformat}
> <h:form>
> <a4j:commandButton render=3D"@form" value=3D"rerender me"/>
> <style type=3D"text/css">
> /* <![CDATA[ */
>       .somecssclass {...}
> /* ]] */
> </style>
> </h:form>
> {noformat}
> The AJAX response then looks like so:
> {noformat}
> <partial-response><changes><update id=3D"someID"><![CDATA[
> ...
>    <![CDATA[
>       ...
>   ]]
> ...
> ]]</ ... >
> {noformat}
> And this is incorrect XML, since CDATA cannot contain ']]', so the respon=
se is discarded.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira


--===============3115417234234332622==--