[jira] [Created] (WODEN-238) wsdl-viewer schemaLocation with query params rendered without escaping

["D Soa (JIRA)" <ji...@apache.org>]

D Soa created WODEN-238:
---------------------------

             Summary: wsdl-viewer schemaLocation with query params rendered without escaping
                 Key: WODEN-238
                 URL: https://issues.apache.org/jira/browse/WODEN-238
             Project: Woden
          Issue Type: Bug
            Reporter: D Soa


I'm using a very old version of wsdl-viewer.xsd, but it looks like the current version has the same problem.

If you have an import statement with a schemaLocation that includes query params, the ampersands are not properly escaped.  For example:

{noformat}<xsd:import ... schemaLocation="http://someurl/servlet/WSDLResourceServlet?foo=bar&amp;x=y"/>
{noformat}
 
renders this as:
{noformat}<span class="xml-att-val">"http://someurl/servlet/WSDLResourceServlet?foo=bar&x=y"
</span>
{noformat}

resulting in the error:

{noformat}The reference to entity "x" must end with the ';' delimiter.
{noformat}

This is due to line 2058:
{noformat}<xsl:value-of select="concat('&quot;', ., '&quot;')" disable-output-escaping="yes"/>
{noformat}
The disable-output-escaping="yes" does not properly escape the ampersand in the query string, 

I was able to fix this by changing "yes" to "no".  I don't think this will break anything--I can't see why an attribute value should not be escaped here.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org