You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@struts.apache.org by "James Mitchell (JIRA)" <ji...@apache.org> on 2006/08/25 04:18:31 UTC
[jira] Resolved: (STR-2932) html:option tag does not apply any
filtering to escape HTML-sensitive characters
[ http://issues.apache.org/struts/browse/STR-2932?page=all ]
James Mitchell resolved STR-2932.
---------------------------------
Fix Version/s: 1.3.6
Resolution: Fixed
As was indicated in the dev list discussion, this (newly added) filter attribute for OptionTag has the opposite default behaviour when compared to the same thing in OptionsTag. Not sure whether this needs a point relase or higher before the behaviour can be matched up between the two.
> html:option tag does not apply any filtering to escape HTML-sensitive characters
> --------------------------------------------------------------------------------
>
> Key: STR-2932
> URL: http://issues.apache.org/struts/browse/STR-2932
> Project: Struts 1
> Issue Type: Bug
> Components: Taglibs
> Affects Versions: 1.3.5
> Reporter: John R. Fallows
> Fix For: 1.3.6
>
> Attachments: struts-el-1.3.6-SNAPSHOT-option-filter.patch, struts-taglib-1.3.6-SNAPSHOT-option-filter.patch
>
>
> The filter attribute is available for html:options and html:optionsCollection, but is missing for html:option.
> The filter attribute on html:option would behave in a manner consistent with the html:options and html:optionsCollection tags, causing HTML-sensitive characters, such as ampersand, to be escaped in the HTML output.
> This issue is marked as a bug because it is not currently possible to post back the selected option value when it contains HTML-sensitive characters -- either the html:option value is not properly escaped or, if the application developer manually escapes the option value, then the postback value is the unescaped value.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/struts/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira