Hi Louis,
2009/3/5 Louis Ryan <[email protected]>:
> Vincent,
>
> Was the test failure in a unit-test or the browser. I believe always
> escaping & should work in all major browsers.
Having this logic in NekoSimplifiedHtmlParser#appendAttributeValue()
and NekoSerializer#printAttributeValue()
} else if (c == '&') {
builder.append("&");
Failed tests:
enforceImageSrcProxied(org.apache.shindig.gadgets.render.SanitizedRenderingContentRewriterTest)
enforceImageSrcProxied(org.apache.shindig.gadgets.render.SanitizedRenderingContentRewriterTest)
Time elapsed: 0 sec <<< FAILURE!
org.junit.ComparisonFailure:
expected:<...www.evil.com%2Fx.js&[gadget=www.example.org%2Fgadget.xml&fp=45508&sanitize=1&]rewriteMime=image/*"...>
but
was:<...www.evil.com%2Fx.js&[amp;gadget=www.example.org%2Fgadget.xml&fp=45508&sanitize=1&]rewriteMime=image/*"...>
at org.junit.Assert.assertEquals(Assert.java:123)
at org.junit.Assert.assertEquals(Assert.java:145)
at
org.apache.shindig.gadgets.render.SanitizedRenderingContentRewriterTest.enforceImageSrcProxied(SanitizedRenderingContentRewriterTest.java:177)
HTH
Vincent