[jboss-jira] [JBoss JIRA] Commented: (JBESB-383) XML Marshaling/Unmarshling code performs no normalisation on name values used to create XML/DOM element nodes.

[Tom Fennelly (JIRA)]

    [ http://jira.jboss.com/jira/browse/JBESB-383?page=comments#action_12352402 ] 
            
Tom Fennelly commented on JBESB-383:
------------------------------------

Note that there may be other locations in the code where normalisation is required.  I recall some code using a "type" URI (serialisation type I think it was).  The likes of these would probably also require normalisation.  I suppose a grep for "createElement" should catch them all.

> XML Marshaling/Unmarshling code performs no normalisation on name values used to create XML/DOM element nodes.
> --------------------------------------------------------------------------------------------------------------
>
>                 Key: JBESB-383
>                 URL: http://jira.jboss.com/jira/browse/JBESB-383
>             Project: JBoss ESB
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Rosetta
>    Affects Versions: 4.0 CR2
>            Reporter: Tom Fennelly
>         Assigned To: Mark Little
>             Fix For: 4.0 Maintenance Pack 1
>
>          Time Spent: 2 hours
>  Remaining Estimate: 0 minutes
>
> An example of this can be seen in org.jboss.internal.soa.esb.message.format.xml.BodyImpl.toXML(Element) where the body attachment keys are used as the container element name.  What if someone saves an attachment that contains special/unsupported chars??  This is very possible!

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira