[richfaces-issues] [JBoss JIRA] (RF-12921) rich:validator: created message is escaped, even if the message component should not be escaped

Brian Leathem (JIRA) jira-events at lists.jboss.org
Thu Apr 18 18:00:54 EDT 2013


     [ https://issues.jboss.org/browse/RF-12921?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brian Leathem resolved RF-12921.
--------------------------------

    Fix Version/s:     (was: 4.3.2)
       Resolution: Rejected


The escape attribute refers to escaping html in the application provided portion of the converter or validation message.  The user input should always be escaped, as it would be dangerous not to do so.

Try:
{code}
<h:inputText id="simpleInput1"
    value="#{multipleValidationRulesBean.value}"
    converter="#{multipleValidationRulesBean.converter}"
    converterMessage="Some other &lt;b&gt;html&lt;/b&gt; message"
    validatorMessage="Some &lt;b&gt;html&lt;/b&gt; message">
{code}
                
> rich:validator: created message is escaped, even if the message component should not be escaped
> -----------------------------------------------------------------------------------------------
>
>                 Key: RF-12921
>                 URL: https://issues.jboss.org/browse/RF-12921
>             Project: RichFaces
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: component-validators
>         Environment: RichFaces 4.3.2-SNAPSHOT
> Metamer 5.0.0-SNAPSHOT
> JBoss AS 7.1.1.Final
> Java(TM) SE Runtime Environment 1.7.0_09-b05 @ Linux
> Firefox 18.0 @ Linux x86_64
>            Reporter: Jiří Štefek
>            Assignee: Brian Leathem
>            Priority: Minor
>   Original Estimate: 1 hour
>  Remaining Estimate: 1 hour
>
> The created message is always escaped, even if the message component has its attribute @escape=false.
> Message components: rich:message, rich:messages, rich:notifyMessage, rich:notifyMessages.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira



More information about the richfaces-issues mailing list