single quote escapted to ' causes issues in ie8
----------------------------------------------------

                 Key: TAPESTRY-2764
                 URL: https://issues.apache.org/jira/browse/TAPESTRY-2764
             Project: Tapestry
          Issue Type: Bug
    Affects Versions: 5.1
         Environment: ie8 browser
            Reporter: Paul Stanton


Tapestry escapes single quotes in attribute values using ' which causes 
issues in ie8. the correct technique to avoid the ie8 issue is to use the hex 
number in the ascii reference.

for example the content of the zone

<t:zone ...>
   <a href="" onclick="alert('hi'); return false;">hi</a>
</t:zone> 

will be encoded into the following string within the JSON in the XHR response:

"<a href='' onclick='alert(&apos;hi&apos;); return false;'>hi</a>"

This will cause a syntax error in ie8.

PATCH:

Tapestry 5.1.0.5,
org.apache.tapestry5.dom.AbstractMarkupModel
line 136
builder.append("&apos;");
change to
builder.append("&#39;"); 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to