You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@wicket.apache.org by "W.Mazur (JIRA)" <ji...@apache.org> on 2012/08/02 09:33:02 UTC

[jira] [Created] (WICKET-4691) Unescaped html in autocomplete

W.Mazur created WICKET-4691:
-------------------------------

             Summary: Unescaped html in autocomplete
                 Key: WICKET-4691
                 URL: https://issues.apache.org/jira/browse/WICKET-4691
             Project: Wicket
          Issue Type: Bug
          Components: wicket-extensions
    Affects Versions: 1.5.7
         Environment: Windows, Java 1.6
            Reporter: W.Mazur
            Priority: Minor


Create list of Strings with html keywords: List<String> list = Arrays.asList("a", "<td>", "<li>","</td>");
Let autocomplete display these values: @Override
			protected Iterator getChoices(String input) {
				return list.iterator();
			}
html is unescaped, strings are "copy and paste"'d to html

Ajax response (from Firebug) looks like this:
<ul><li textvalue="a">a</li><li textvalue="<td>"><td></li><li textvalue="<li>"><li></li><li textvalue="</td>"></td></li></ul>

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Resolved] (WICKET-4691) Unescaped html in autocomplete

Posted by "Martin Grigorov (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/WICKET-4691?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Martin Grigorov resolved WICKET-4691.
-------------------------------------

       Resolution: Fixed
    Fix Version/s: 1.5.8
                   6.0.0
         Assignee: Martin Grigorov
    
> Unescaped html in autocomplete
> ------------------------------
>
>                 Key: WICKET-4691
>                 URL: https://issues.apache.org/jira/browse/WICKET-4691
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket-extensions
>    Affects Versions: 1.5.7
>         Environment: Windows, Java 1.6
>            Reporter: W.Mazur
>            Assignee: Martin Grigorov
>            Priority: Minor
>             Fix For: 6.0.0, 1.5.8
>
>         Attachments: myproject.zip
>
>
> Create list of Strings with html keywords: List<String> list = Arrays.asList("a", "<td>", "<li>","</td>");
> Let autocomplete display these values: @Override
> 			protected Iterator getChoices(String input) {
> 				return list.iterator();
> 			}
> html is unescaped, strings are "copy and paste"'d to html
> Ajax response (from Firebug) looks like this:
> <ul><li textvalue="a">a</li><li textvalue="<td>"><td></li><li textvalue="<li>"><li></li><li textvalue="</td>"></td></li></ul>

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (WICKET-4691) Unescaped html in autocomplete

Posted by "W.Mazur (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/WICKET-4691?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

W.Mazur updated WICKET-4691:
----------------------------

    Attachment: myproject.zip

Quick Start Attached
                
> Unescaped html in autocomplete
> ------------------------------
>
>                 Key: WICKET-4691
>                 URL: https://issues.apache.org/jira/browse/WICKET-4691
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket-extensions
>    Affects Versions: 1.5.7
>         Environment: Windows, Java 1.6
>            Reporter: W.Mazur
>            Priority: Minor
>         Attachments: myproject.zip
>
>
> Create list of Strings with html keywords: List<String> list = Arrays.asList("a", "<td>", "<li>","</td>");
> Let autocomplete display these values: @Override
> 			protected Iterator getChoices(String input) {
> 				return list.iterator();
> 			}
> html is unescaped, strings are "copy and paste"'d to html
> Ajax response (from Firebug) looks like this:
> <ul><li textvalue="a">a</li><li textvalue="<td>"><td></li><li textvalue="<li>"><li></li><li textvalue="</td>"></td></li></ul>

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira