D Soa created WODEN-238:
---------------------------

             Summary: wsdl-viewer schemaLocation with query params rendered 
without escaping
                 Key: WODEN-238
                 URL: https://issues.apache.org/jira/browse/WODEN-238
             Project: Woden
          Issue Type: Bug
            Reporter: D Soa


I'm using a very old version of wsdl-viewer.xsd, but it looks like the current 
version has the same problem.

If you have an import statement with a schemaLocation that includes query 
params, the ampersands are not properly escaped.  For example:

{noformat}<xsd:import ... 
schemaLocation="http://someurl/servlet/WSDLResourceServlet?foo=bar&amp;x=y"/>
{noformat}
 
renders this as:
{noformat}<span 
class="xml-att-val">"http://someurl/servlet/WSDLResourceServlet?foo=bar&x=y";
</span>
{noformat}

resulting in the error:

{noformat}The reference to entity "x" must end with the ';' delimiter.
{noformat}

This is due to line 2058:
{noformat}<xsl:value-of select="concat('&quot;', ., '&quot;')" 
disable-output-escaping="yes"/>
{noformat}
The disable-output-escaping="yes" does not properly escape the ampersand in the 
query string, 

I was able to fix this by changing "yes" to "no".  I don't think this will 
break anything--I can't see why an attribute value should not be escaped here.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to