[richfaces-issues] [JBoss JIRA] (RF-13221) Incorrect XML encoding in AJAX response

[Jonáš Trantina (JIRA)]

Jonáš Trantina created RF-13221:
-----------------------------------

             Summary: Incorrect XML encoding in AJAX response
                 Key: RF-13221
                 URL: https://issues.jboss.org/browse/RF-13221
             Project: RichFaces
          Issue Type: Bug
      Security Level: Public (Everyone can see)
    Affects Versions: 4.3.4
            Reporter: Jonáš Trantina


Consider the following example:
<h:form>
<a4j:commandButton render="@form" value="rerender me"/>

<script src="path_to_some_script?param=asd&amp;important=param"></script>

</h:form>

when commandButton is clicked, the form is rerendered and the response looks like this:
<partial-response><changes><update id="someID"><![CDATA[
   ...
  <script src="path_to_some_script?param=asd&amp;important=param"></script>
]]</ ... >

But this is wrong. Because script tag is already in CDATA, so there is no need for XML encoding for '&' entity.
This further causes script loading to fail (performed by jsf.js), whenever parameters are needed (e.g. portal environment), 
because script is downloaded from ""path_to_some_script?param=asd&amp;important=param" 
instead of ""path_to_some_script?param=asd&important=param".

Another very similar issue is when CDATA element is present in a re-rendered fragment. Example:
<h:form>
<a4j:commandButton render="@form" value="rerender me"/>

<style type="text/css">
/* <![CDATA[ */
      .somecssclass {...}
/* ]] */
</style>

</h:form>

The AJAX response then looks like so:
<partial-response><changes><update id="someID"><![CDATA[
...
   <![CDATA[
      ...
  ]]
...
]]</ ... >

And this is incorrect XML, since CDATA cannot contain ']]', so the response is discarded.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira