[Bug 24211] New: < should be quoted in attribute values

https://www.w3.org/Bugs/Public/show_bug.cgi?id=24211

            Bug ID: 24211
           Summary: < should be quoted in attribute values
           Product: WHATWG
           Version: unspecified
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: DOM Parsing and Serialization
          Assignee: Ms2ger@gmail.com
          Reporter: mike@w3.org
        QA Contact: sideshowbarker+domparsingspec@gmail.com
                CC: costan@gmail.com, mike@w3.org,
                    public-webapps-bugzilla@w3.org, www-dom@w3.org

Quoting Victor's description and comments from Bug #24174:

The XML specification forbids < in attribute values.

Source 1: see the grammar for AttValue below.
http://www.w3.org/TR/REC-xml/#sec-common-syn

Source 2: http://www.w3.org/TR/REC-xml/#CleanAttrVals


The XML serialization algorithm in the DOM Parsing and Serialization
specification can produce < in XML attribute values.

https://dvcs.w3.org/hg/innerhtml/raw-file/tip/index.html#dfn-concept-serialize-xml-attributes

Specifically, step 2 substep 4 only quotes " and &. It should also quote < as
&lt;.

One more note -- all browsers currently quote both < (as ^&lt;) and > (as &gt;)
in XML attributes.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Received on Monday, 6 January 2014 04:32:09 UTC