tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 57136] EL Parser escaping dollar sign not ${ or ${...}
Date Wed, 09 Sep 2015 09:28:45 GMT
https://bz.apache.org/bugzilla/show_bug.cgi?id=57136

--- Comment #17 from Mark Thomas <markt@apache.org> ---
I think I have found another, related, problem in attribute values.

The problem I described in comment #16 (where I was thinking about template
text) also applies to attribute values. Specifically, consider the following:
<tags:echo echo="16-${'\\$'}" />

Currently, Tomcat applied attribute value escaping to the whole value. This is
not correct. The production in the JSP spec for QuotedChar (which is used in
attribute values) means that attribute escaping only applies outside the EL.
Inside the EL is handled by ELEXpressionBody which delegates to the EL spec.

I am currently extending the EL test cases to take all of this into account
before looking at what fixes are required.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message