On 05/11/2015 05:05, Konstantin Kolinko wrote:
> Hi!
> 
> I happened to stumble on the following entry in changelog for 6.0.19:
> 
>       <fix>
>         Fix various edge-cases when parsing EL, particularly inside attribute
>         values. Note that the Expert Group has confirmed that JSP.1.6 takes
>         precedence over JSP.1.3.10. Therefore EL in attributes must be escaped
>         twice. (markt)
>       </fix>

Wow. I have absolutely no memory of that at all.

Let me see if I can dig up the discussion that provided that confirmation.

Mark


> 
> Chapters mentioned here:
> JSP.1.6 Quoting and Escape Conventions
> JSP.1.3.10.1 EBNF Grammar for JSP Syntax
> 
> Related discussion:
> "EL and TCK" on dev@, started 2008-09-18
> http://tomcat.markmail.org/thread/2rq3vkvx76vmhq75
> 
> Related commits:
> Tomcat 6:
> http://svn.apache.org/viewvc?rev=708165&view=rev
> http://svn.apache.org/viewvc?rev=708166&view=rev
> Tomcat trunk:
> http://svn.apache.org/viewvc?rev=702587&view=rev
> 
> So apparently the change in EL escaping in attributes that was done
> while fixing BZ 57136 [1] has already been discussed and resolved in a
> different way 7 years ago.
> 
> [1] https://bz.apache.org/bugzilla/show_bug.cgi?id=57136#c17
> 
> Best regards,
> Konstantin Kolinko
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to