You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Radu Cotescu (Jira)" <ji...@apache.org> on 2020/10/01 14:16:00 UTC
[jira] [Updated] (SLING-9783) The HTL compiler will trigger a NPE
if a null value should be written into an HTML attribute
[ https://issues.apache.org/jira/browse/SLING-9783?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Radu Cotescu updated SLING-9783:
--------------------------------
Description:
SLING-9696 introduced a side-effect into the HTL compiler, which doesn't correctly check if an attribute should be displayed or not when the evaluated expression returns a {{null}} value.
The following code example will generate a NPE:
{code:html}
<a href="${pojo.null @ context='unsafe'}>Click</a>
{code}
if the {{pojo.null}} actually returns {{null}}, since the {{unsafe}} context will return the original passed value.
was:SLING-9696 introduced a side-effect into the HTL compiler, which doesn't correctly check if an attribute should be displayed or not when the evaluated expression returns a {{null}} value.
> The HTL compiler will trigger a NPE if a null value should be written into an HTML attribute
> --------------------------------------------------------------------------------------------
>
> Key: SLING-9783
> URL: https://issues.apache.org/jira/browse/SLING-9783
> Project: Sling
> Issue Type: Bug
> Components: Scripting
> Affects Versions: Scripting HTL Compiler 1.2.8-1.4.0
> Reporter: Radu Cotescu
> Assignee: Radu Cotescu
> Priority: Major
> Fix For: Scripting HTL Compiler 1.2.10-1.4.0
>
>
> SLING-9696 introduced a side-effect into the HTL compiler, which doesn't correctly check if an attribute should be displayed or not when the evaluated expression returns a {{null}} value.
> The following code example will generate a NPE:
> {code:html}
> <a href="${pojo.null @ context='unsafe'}>Click</a>
> {code}
> if the {{pojo.null}} actually returns {{null}}, since the {{unsafe}} context will return the original passed value.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)