[jira] Updated: (WW-3246) Optgroup Freemarker template desn't escape HTML

["Xavi Arias (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/struts/browse/WW-3246?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Xavi Arias updated WW-3246:
---------------------------

    Summary: Optgroup Freemarker template desn't escape HTML  (was: Optgroup FTL template desn't escape HTML)

> Optgroup Freemarker template desn't escape HTML
> -----------------------------------------------
>
>                 Key: WW-3246
>                 URL: https://issues.apache.org/struts/browse/WW-3246
>             Project: Struts 2
>          Issue Type: Bug
>          Components: Other
>    Affects Versions: 2.1.6
>            Reporter: Xavi Arias
>            Priority: Minor
>
> The actual code of optgroup.ftl in the simple theme renders ${tmpKeyStr}, should not be ${tmpKeyStr?html} as in select tags?
> <#assign tmpKey=stack.findValue(optGroupInternalListUiBean.parameters.listKey) />
> 	<#assign tmpValue=stack.findValue(optGroupInternalListUiBean.parameters.listValue) />
> 	<#assign tmpKeyStr = tmpKey.toString() />
> 	<option value="${tmpKeyStr}"
> 	<#if tag.contains(parameters.nameValue, tmpKeyStr) == true>
> 	selected="selected"
> 	</#if>
> 	>${tmpValue}
> 	</option>

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.