W3C home > Mailing lists > Public > www-dom@w3.org > October to December 2013

[Bug 24174] New: < should be quoted in attribute values

From: <bugzilla@jessica.w3.org>
Date: Sat, 28 Dec 2013 21:58:53 +0000
To: www-dom@w3.org
Message-ID: <bug-24174-4009@http.www.w3.org/Bugs/Public/>
https://www.w3.org/Bugs/Public/show_bug.cgi?id=24174

            Bug ID: 24174
           Summary: < should be quoted in attribute values
           Product: WebAppsWG
           Version: unspecified
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: DOM Parsing and Serialization
          Assignee: travil@microsoft.com
          Reporter: costan@gmail.com
        QA Contact: public-webapps-bugzilla@w3.org
                CC: mike@w3.org, www-dom@w3.org

The XML specification forbids < in attribute values.

Source 1: see the grammar for AttValue below.
http://www.w3.org/TR/REC-xml/#sec-common-syn

Source 2: http://www.w3.org/TR/REC-xml/#CleanAttrVals


The XML serialization algorithm in the DOM Parsing and Serialization
specification can produce < in XML attribute values.

https://dvcs.w3.org/hg/innerhtml/raw-file/tip/index.html#dfn-concept-serialize-xml-attributes

Specifically, step 2 substep 4 only quotes " and &. It should also quote < as
&lt;.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Received on Saturday, 28 December 2013 21:58:55 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 20 October 2015 10:46:22 UTC