atom feed10 messages in org.apache.tomcat.devOn escaping of EL in attributes (BZ 5...
FromSent OnAttachments
Konstantin KolinkoNov 4, 2015 9:05 pm 
Mark ThomasNov 5, 2015 12:48 am 
Mark ThomasNov 5, 2015 1:34 am 
Christopher SchultzNov 6, 2015 3:47 am 
Mark ThomasNov 6, 2015 4:11 am 
Christopher SchultzNov 6, 2015 4:24 am 
Mark ThomasNov 6, 2015 4:31 am 
Christopher SchultzNov 6, 2015 12:26 pm 
Konstantin KolinkoNov 9, 2015 6:35 am 
Konstantin KolinkoNov 19, 2015 2:18 am 
Subject:On escaping of EL in attributes (BZ 57136)
From:Konstantin Kolinko (knst@gmail.com)
Date:Nov 4, 2015 9:05:58 pm
List:org.apache.tomcat.dev

Hi!

I happened to stumble on the following entry in changelog for 6.0.19:

<fix> Fix various edge-cases when parsing EL, particularly inside attribute values. Note that the Expert Group has confirmed that JSP.1.6 takes precedence over JSP.1.3.10. Therefore EL in attributes must be escaped twice. (markt) </fix>

Chapters mentioned here: JSP.1.6 Quoting and Escape Conventions JSP.1.3.10.1 EBNF Grammar for JSP Syntax

Related discussion: "EL and TCK" on dev@, started 2008-09-18 http://tomcat.markmail.org/thread/2rq3vkvx76vmhq75

Related commits: Tomcat 6: http://svn.apache.org/viewvc?rev=708165&view=rev http://svn.apache.org/viewvc?rev=708166&view=rev Tomcat trunk: http://svn.apache.org/viewvc?rev=702587&view=rev

So apparently the change in EL escaping in attributes that was done while fixing BZ 57136 [1] has already been discussed and resolved in a different way 7 years ago.

[1] https://bz.apache.org/bugzilla/show_bug.cgi?id=57136#c17