ws-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "D Soa (JIRA)" <>
Subject [jira] [Created] (WODEN-238) wsdl-viewer schemaLocation with query params rendered without escaping
Date Wed, 27 May 2015 20:13:19 GMT
D Soa created WODEN-238:

             Summary: wsdl-viewer schemaLocation with query params rendered without escaping
                 Key: WODEN-238
             Project: Woden
          Issue Type: Bug
            Reporter: D Soa

I'm using a very old version of wsdl-viewer.xsd, but it looks like the current version has
the same problem.

If you have an import statement with a schemaLocation that includes query params, the ampersands
are not properly escaped.  For example:

{noformat}<xsd:import ... schemaLocation="http://someurl/servlet/WSDLResourceServlet?foo=bar&amp;x=y"/>
renders this as:
{noformat}<span class="xml-att-val">"http://someurl/servlet/WSDLResourceServlet?foo=bar&x=y"

resulting in the error:

{noformat}The reference to entity "x" must end with the ';' delimiter.

This is due to line 2058:
{noformat}<xsl:value-of select="concat('&quot;', ., '&quot;')" disable-output-escaping="yes"/>
The disable-output-escaping="yes" does not properly escape the ampersand in the query string,

I was able to fix this by changing "yes" to "no".  I don't think this will break anything--I
can't see why an attribute value should not be escaped here.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message