W3C home > Mailing lists > Public > www-dom@w3.org > January to March 2014

[Bug 24795] New: < should be quoted in attribute values

From: <bugzilla@jessica.w3.org>
Date: Tue, 25 Feb 2014 08:02:54 +0000
To: www-dom@w3.org
Message-ID: <bug-24795-4009@http.www.w3.org/Bugs/Public/>
https://www.w3.org/Bugs/Public/show_bug.cgi?id=24795

            Bug ID: 24795
           Summary: < should be quoted in attribute values
           Product: WHATWG
           Version: unspecified
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: DOM Parsing and Serialization
          Assignee: Ms2ger@gmail.com
          Reporter: Ms2ger@gmail.com
        QA Contact: sideshowbarker+domparsingspec@gmail.com
                CC: bzbarsky@mit.edu, costan@gmail.com, mike@w3.org,
                    public-webapps-bugzilla@w3.org, www-dom@w3.org
        Depends on: 24174

+++ This bug was initially created as a clone of Bug #24174 +++

The XML specification forbids < in attribute values.

Source 1: see the grammar for AttValue below.
http://www.w3.org/TR/REC-xml/#sec-common-syn

Source 2: http://www.w3.org/TR/REC-xml/#CleanAttrVals


The XML serialization algorithm in the DOM Parsing and Serialization
specification can produce < in XML attribute values.

https://dvcs.w3.org/hg/innerhtml/raw-file/tip/index.html#dfn-concept-serialize-xml-attributes

Specifically, step 2 substep 4 only quotes " and &. It should also quote < as
&lt;.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Received on Tuesday, 25 February 2014 08:02:55 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 20 October 2015 10:46:22 UTC