[jboss-jira] [JBoss JIRA] Commented: (JBPORTAL-1054) Invalid HTML in divRenderer

Philipp Taprogge (JIRA) jira-events at jboss.com
Tue Nov 7 13:47:41 EST 2006


    [ http://jira.jboss.com/jira/browse/JBPORTAL-1054?page=comments#action_12346402 ] 
            
Philipp Taprogge commented on JBPORTAL-1054:
--------------------------------------------

The referenced amps are inside the onClick= parameter.
Stuff inside onClick is basically javascript and, as far as I understand it, therefor has to be escaped just like you woulh in a regular script block.
It matters because this is according to specs.
Unencoded amps are not guaranteed to work with all JS engines.

> Invalid HTML in divRenderer
> ---------------------------
>
>                 Key: JBPORTAL-1054
>                 URL: http://jira.jboss.com/jira/browse/JBPORTAL-1054
>             Project: JBoss Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Portal Theme
>    Affects Versions: 2.4 Final
>         Environment: CentOS release 4.4 (Final), jdk1.5.0_06
>            Reporter: Johnny Healey
>         Assigned To: Roy Russo
>
> Minimize/Maximize buttons have urls containing unescaped ampersands.
> "&windowstate=minimized" should read "&windowstate=minimized"

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list