\n\nThe url includes the vertical pipe/bar character '|' which is \"unsafe\" and should be encoded as %7C. Should I open a bug for this issue across the platform?\n\n/Ron", "htmlContent" : "

It appears that numerous Nuxeo xhtml files have script tags with a src attribute url that is not encoded. For example, see line 24 in nuxeo-user-activity-stream/src/main/resources/web/nuxeo.war/incl/includes.xhtml:

\n
<script type=\"text/javascript\" src=\"#{baseURL}js/?scripts=confirmAlerts.js|DragAndDrop.js|tableSelections.js|customSeamRemotingWaiter.js|custom-javascript.js|default-contextmenu-actions.js|custom-contextmenu-actions.js|tooltip.js\"></script>\n
\n

The url includes the vertical pipe/bar character '|' which is “unsafe” and should be encoded as %7C. Should I open a bug for this issue across the platform?

\n

/Ron

" }, { "id" : "1f117c6c-8e98-48e6-9667-3f057f86839a", "label" : "1", "active" : false, "author" : { "uid" : "ebe0a7f6-fe42-4fe4-9830-a2f0e34dd586", "name" : "ebe0a7f6-fe42-4fe4-9830-a2f0e34dd586", "email" : "wmdc1987@aol.com", "firstName" : "ron", "lastName" : null, "title" : "Member", "score" : 1737, "disabled" : false, "virtual" : false, "badgeCount" : null, "notifications" : { "email" : { "name" : "email", "address" : "wmdc1987@aol.com", "notifs" : [ "EditMyAnswer", "CommentMyAnswer", "NewQuestionComment", "EditMyQuestion", "AnswerMyQuestion", "WeeklyDigest", "VoteMyQuestion", "BadgeAwarded", "VoteMyAnswer", "TagMyQuestion", "CommentMyQuestion", "NewQuestion", "NewAnswerComment", "NewAnswer" ] }, "phone" : null }, "badges" : [ "lonesome", "commentator", "teacher", "famous", "puzzler", "student", "notableq", "enthusiast", "revival", "hope", "scholar", "popular" ], "loginCount" : 0, "lastLogin" : 1362997282000, "avatarUrl" : "//www.gravatar.com/avatar/b71f7b438ea488b741060ed6a3e885f4?d=mm&s=%s" }, "created" : "2012-02-23T16:17:55.00Z", "createdAt" : "02/23/2012", "title" : "URL Encoding of script tag src attribute", "content" : "It appears that numerous Nuxeo xhtml files have script tags with a src attribute url that is not encoded. For example, see line 24 in nuxeo-user-activity-stream/src/main/resources/web/nuxeo.war/incl/includes.xhtml:\n\n\n\nThe url includes the vertical pipe/bar character '|' which is \"unsafe\" and should be encoded as %7C. Should I open a bug for this issue across the platform?\n\n/Ron", "htmlContent" : "

It appears that numerous Nuxeo xhtml files have script tags with a src attribute url that is not encoded. For example, see line 24 in nuxeo-user-activity-stream/src/main/resources/web/nuxeo.war/incl/includes.xhtml:

\n

\n

The url includes the vertical pipe/bar character '|' which is “unsafe” and should be encoded as %7C. Should I open a bug for this issue across the platform?

\n

/Ron

" } ] }; Versioning.getActiveVersion = function() { var versions = this.versions; for (var i=0,len=versions.length;i
« URL Encoding of script tag src attribute

Select a revision to compare with:
Side by side diff