https://bz.apache.org/bugzilla/show_bug.cgi?id=57136
--- Comment #17 from Mark Thomas <ma...@apache.org> ---
I think I have found another, related, problem in attribute values.
The problem I described in comment #16 (where I was thinking about template
text) also applies to attribute values. Specifically, consider the following:
<tags:echo echo="16-${'\\$'}" />
Currently, Tomcat applied attribute value escaping to the whole value. This is
not correct. The production in the JSP spec for QuotedChar (which is used in
attribute values) means that attribute escaping only applies outside the EL.
Inside the EL is handled by ELEXpressionBody which delegates to the EL spec.
I am currently extending the EL test cases to take all of this into account
before looking at what fixes are required.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
