[Bug 19209] New: Urls can contain &. from bugzilla@jessica.w3.org on 2012-10-02 (www-validator-cvs@w3.org from October 2012)

From: <bugzilla@jessica.w3.org>
Date: Tue, 02 Oct 2012 15:00:31 +0000
To: www-validator-cvs@w3.org
Message-ID: <bug-19209-169@http.www.w3.org/Bugs/Public/>

https://www.w3.org/Bugs/Public/show_bug.cgi?id=19209

           Summary: Urls can contain &.
           Product: Validator
           Version: HEAD
          Platform: PC
        OS/Version: Windows NT
            Status: NEW
          Severity: normal
          Priority: P2
         Component: HTML5
        AssignedTo: mike+validator@w3.org
        ReportedBy: steve@fancyguy.com
         QAContact: www-validator-cvs@w3.org


In the src attributes for script, img, etc a valid url can have an & in it
without being escaped.

The message for a script tag with a query string in the url and multiple
parameters with & as the delimiter:

"& did not start a character reference. (& probably should have been escaped as
&amp;.)"

-- 
Configure bugmail: https://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Tuesday, 2 October 2012 15:00:40 UTC