[prev in list] [next in list] [prev in thread] [next in thread] 

List:       jaxme-dev
Subject:    [jira] [Created] (WODEN-238) wsdl-viewer schemaLocation with query params rendered without escaping
From:       "D Soa (JIRA)" <jira () apache ! org>
Date:       2015-05-27 20:13:19
Message-ID: JIRA.12833166.1432757545000.42822.1432757598919 () Atlassian ! JIRA
[Download RAW message or body]

D Soa created WODEN-238:
---------------------------

             Summary: wsdl-viewer schemaLocation with query params rendered without \
escaping  Key: WODEN-238
                 URL: https://issues.apache.org/jira/browse/WODEN-238
             Project: Woden
          Issue Type: Bug
            Reporter: D Soa


I'm using a very old version of wsdl-viewer.xsd, but it looks like the current \
version has the same problem.

If you have an import statement with a schemaLocation that includes query params, the \
ampersands are not properly escaped.  For example:

{noformat}<xsd:import ... \
schemaLocation="http://someurl/servlet/WSDLResourceServlet?foo=bar&amp;x=y"/> \
{noformat}  
renders this as:
{noformat}<span class="xml-att-val">"http://someurl/servlet/WSDLResourceServlet?foo=bar&x=y"
 </span>
{noformat}

resulting in the error:

{noformat}The reference to entity "x" must end with the ';' delimiter.
{noformat}

This is due to line 2058:
{noformat}<xsl:value-of select="concat('&quot;', ., '&quot;')" \
disable-output-escaping="yes"/> {noformat}
The disable-output-escaping="yes" does not properly escape the ampersand in the query \
string, 

I was able to fix this by changing "yes" to "no".  I don't think this will break \
anything--I can't see why an attribute value should not be escaped here.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic