Author: markt
Date: Thu Dec 15 16:50:25 2011
New Revision: 1214855

URL: http://svn.apache.org/viewvc?rev=1214855&view=rev
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=52335
% is only escaped as <\%, not \%

Added:
    tomcat/trunk/test/webapp-3.0/bug52335.jsp
Modified:
    tomcat/trunk/java/org/apache/jasper/compiler/Parser.java
    tomcat/trunk/test/org/apache/jasper/compiler/TestParser.java

Modified: tomcat/trunk/java/org/apache/jasper/compiler/Parser.java
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/jasper/compiler/Parser.java?rev=1214855&r1=1214854&r2=1214855&view=diff
==============================================================================
--- tomcat/trunk/java/org/apache/jasper/compiler/Parser.java (original)
+++ tomcat/trunk/java/org/apache/jasper/compiler/Parser.java Thu Dec 15 
16:50:25 2011
@@ -1278,7 +1278,7 @@ class Parser implements TagConstants {
 
     /*
      * Parse for a template text string until '<' or "${" or "#{" is 
encountered,
-     * recognizing escape sequences "\%", "\$", and "\#".
+     * recognizing escape sequences "<\%", "\$", and "\#".
      */
     private void parseTemplateText(Node parent) throws JasperException {
 
@@ -1297,8 +1297,33 @@ class Parser implements TagConstants {
         while (reader.hasMoreInput()) {
             ch = reader.nextChar();
             if (ch == '<') {
-                reader.pushChar();
-                break;
+                // Check for <\%
+                ch = reader.nextChar();
+                if (ch == -1) {
+                    reader.pushChar();
+                    break;
+                } else if (ch == '\\') {
+                    ch = reader.nextChar();
+                    if (ch == -1) {
+                        reader.pushChar();
+                        reader.pushChar();
+                        break;
+                    } else if (ch == '%') {
+                        ttext.write('<');
+                        ttext.write('\\');
+                        ttext.write('%');
+                        continue;
+                    } else {
+                        reader.pushChar();
+                        reader.pushChar();
+                        reader.pushChar();
+                        break;
+                    }
+                } else {
+                    reader.pushChar();
+                    reader.pushChar();
+                    break;
+                }
             } else if ((ch == '$' || ch == '#') && !pageInfo.isELIgnored()) {
                 if (!reader.hasMoreInput()) {
                     ttext.write(ch);
@@ -1318,9 +1343,9 @@ class Parser implements TagConstants {
                     break;
                 }
                 char next = (char) reader.peekChar();
-                // Looking for \% or \$ or \#
-                if (next == '%' || ((next == '$' || next == '#') &&
-                        !pageInfo.isELIgnored())) {
+                // Looking for \$ or \# when EL is being used
+                if ((next == '$' || next == '#') &&
+                        !pageInfo.isELIgnored()) {
                     ch = reader.nextChar();
                 }
             }

Modified: tomcat/trunk/test/org/apache/jasper/compiler/TestParser.java
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/test/org/apache/jasper/compiler/TestParser.java?rev=1214855&r1=1214854&r2=1214855&view=diff
==============================================================================
--- tomcat/trunk/test/org/apache/jasper/compiler/TestParser.java (original)
+++ tomcat/trunk/test/org/apache/jasper/compiler/TestParser.java Thu Dec 15 
16:50:25 2011
@@ -290,6 +290,26 @@ public class TestParser extends TomcatBa
         assertEcho(res.toString(), "OK");
     }
 
+    @Test
+    public void testBug52335() throws Exception {
+        Tomcat tomcat = getTomcatInstance();
+
+        File appDir =
+            new File("test/webapp-3.0");
+        // app dir is relative to server home
+        tomcat.addWebapp(null, "/test", appDir.getAbsolutePath());
+
+        tomcat.start();
+
+        ByteChunk res = getUrl("http://localhost:"; + getPort() +
+                "/test/bug52335.jsp");
+
+        String result = res.toString();
+        // Beware of the differences between escaping in JSP attributes and
+        // in Java Strings
+        assertEcho(result, "00 - \\% \\\\% <\\%");
+    }
+
     /** Assertion for text printed by tags:echo */
     private static void assertEcho(String result, String expected) {
         assertTrue(result.indexOf("<p>" + expected + "</p>") > 0);

Added: tomcat/trunk/test/webapp-3.0/bug52335.jsp
URL: 
http://svn.apache.org/viewvc/tomcat/trunk/test/webapp-3.0/bug52335.jsp?rev=1214855&view=auto
==============================================================================
--- tomcat/trunk/test/webapp-3.0/bug52335.jsp (added)
+++ tomcat/trunk/test/webapp-3.0/bug52335.jsp Thu Dec 15 16:50:25 2011
@@ -0,0 +1,24 @@
+<%--
+ Licensed to the Apache Software Foundation (ASF) under one or more
+  contributor license agreements.  See the NOTICE file distributed with
+  this work for additional information regarding copyright ownership.
+  The ASF licenses this file to You under the Apache License, Version 2.0
+  (the "License"); you may not use this file except in compliance with
+  the License.  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+--%>
+<%@ page isELIgnored="true" %>
+<html>
+  <head><title>Bug 52335 test case</title></head>
+  <body>
+    <p>00 - \% \\% <\%</p>
+  </body>
+</html>
+



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to