W3C home > Mailing lists > Public > www-dom@w3.org > January to March 2014

[Bug 24211] New: < should be quoted in attribute values

From: <bugzilla@jessica.w3.org>
Date: Mon, 06 Jan 2014 04:32:07 +0000
To: www-dom@w3.org
Message-ID: <bug-24211-4009@http.www.w3.org/Bugs/Public/>
https://www.w3.org/Bugs/Public/show_bug.cgi?id=24211

            Bug ID: 24211
           Summary: < should be quoted in attribute values
           Product: WHATWG
           Version: unspecified
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: DOM Parsing and Serialization
          Assignee: Ms2ger@gmail.com
          Reporter: mike@w3.org
        QA Contact: sideshowbarker+domparsingspec@gmail.com
                CC: costan@gmail.com, mike@w3.org,
                    public-webapps-bugzilla@w3.org, www-dom@w3.org

Quoting Victor's description and comments from Bug #24174:

The XML specification forbids < in attribute values.

Source 1: see the grammar for AttValue below.
http://www.w3.org/TR/REC-xml/#sec-common-syn

Source 2: http://www.w3.org/TR/REC-xml/#CleanAttrVals


The XML serialization algorithm in the DOM Parsing and Serialization
specification can produce < in XML attribute values.

https://dvcs.w3.org/hg/innerhtml/raw-file/tip/index.html#dfn-concept-serialize-xml-attributes

Specifically, step 2 substep 4 only quotes " and &. It should also quote < as
&lt;.

One more note -- all browsers currently quote both < (as ^&lt;) and > (as &gt;)
in XML attributes.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Received on Monday, 6 January 2014 04:32:09 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 20 October 2015 10:46:22 UTC