3861 2005-07-05 04:28:35 -0700 & and & in link do not get converted to & 2007-07-12 21:26:00 -0700 1 1 1 Unclassified WebKit New Bugs 412 Mac OS X 10.4 RESOLVED FIXED http://bug.mathaddicts.org/ P2 Major --- 1 travis webkit-unassigned ap bryce1 jrn2005 oldest_to_newest 13966 0 travis 2005-07-05 04:28:38 -0700 When the server sets the Content-type to text/xml and a link is clicked where the href contains a properly-escaped ampersand, the page loaded uses the numerical escape code for an ampersand instead of an ampersand. This causes some serious issues with server-generated websites as links that set more than one variable are mutilated. 13967 1 2806 joost 2005-07-05 04:41:53 -0700 Created attachment 2806 testcase application/xhtml+xml 13968 2 2807 joost 2005-07-05 04:46:28 -0700 Created attachment 2807 testcase application xhtml+xml 13969 3 2808 joost 2005-07-05 04:51:11 -0700 Created attachment 2808 testcase text/html common text/html testcase 13970 4 2809 joost 2005-07-05 04:52:34 -0700 Created attachment 2809 testcase text/xml 13971 5 joost 2005-07-05 04:55:09 -0700 testcases don't work yet, the url shows a testcase that does... it IS a bug tho :) 13973 6 2811 joost 2005-07-05 04:56:35 -0700 Created attachment 2811 testcase application/xhtml+xml 13974 7 joost 2005-07-05 05:01:06 -0700 testcases work now. It seems that webkit just doesn't change & into & but it DOES change & into &. Renaming bug. 20282 8 4014 info 2005-09-23 03:54:10 -0700 Created attachment 4014 Instruct libXML to parse entities The problem originated in the switch to libXML as the standard XML parser. LibXML will not parse entities by default and must be explicitly instructed to do so. The previous Qt parser works the other way around. This patch will turn on entity parsing for libXML. 20285 9 4014 darin 2005-09-23 08:40:15 -0700 Comment on attachment 4014 Instruct libXML to parse entities Looks good to me. I believe Eric Seidel is already working on this. 20299 10 4014 eric 2005-09-23 09:29:46 -0700 Comment on attachment 4014 Instruct libXML to parse entities This patch AFAIK won't actually do anything. Intructing it is only really half the battle. If you look at my patch: http://bugzilla.opendarwin.org/attachment.cgi?id=3953 you'll see the rest of the improvements I needed to make for Entity support. 20300 11 info 2005-09-23 09:49:50 -0700 Eric: This patch does do something. It enables libxml's build-in entity support. This build-in support is limited to numeric entities and the standard named entities defined in XML (quot, amp, lt, gt), which is exactly what this bug is about. It looks like your patch will do the same and additionally add support for other named entities (bug 4301), so my patch not needed anymore. 22141 12 eric 2005-10-16 21:36:51 -0700 This seems fixed. *** This bug has been marked as a duplicate of 4301 *** 22143 13 eric 2005-10-16 21:37:42 -0700 Actually, this one is fixed, but independent of bug 4301. 44880 14 ap 2006-11-21 13:04:06 -0800 *** Bug 11655 has been marked as a duplicate of this bug. *** 44559 15 jrn2005 2006-11-24 04:38:16 -0800 As I'm still seeing this bug in version 419.3, I'm wondering when we'll see a fixed version? Okay, what I really mean is, was the patch never committed into the source, or has this been broken again since fixing? 44538 16 ap 2006-11-24 09:58:02 -0800 I've just tested, and it works correctly in the latest nightly build: <http://nightly.webkit.org>. Vendors (such as Apple, Omni or Adobe) do not provide information about their release plans, and if you need this particular bugfix to be released ASAP, you'd have to contact each of them directly, unfortunately. 6645 17 bryce1 2007-06-22 23:16:05 -0700 I still see this in Safari 2.0.4 (419.3). AFIK, it is impossible to send more than one parameter back to the server in a xml document, such as XHTML MP (Mobile Profile), if it's served as xml: test.xhtml <?xml version="2.0" encoding="UTF-8"?> <!DOCTYPE html PUBLIC "-//WAPFORUM//DTD XHTML Mobile 1.0//EN" "http://www.wapforum.org/DTD/xhtml-mobile10.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> <head><title>City CarShare - Neigborhood Vehicles</title></head> <body> <h2><img src="logo.png" alt="" />City CarShare</h2> <p> City CarShare is a Bay Area nonprofit on a mission to provide convenient, affordable access to cars so that we can reduce individual car ownership... <a href="http://www.citycarshare.org/">www.citycarshare.org</a><br/> <a href="http://www.citycarshare.org/test.xhtml?foo=1234&fum=4567">test1</a><br/> <a href="http://www.citycarshare.org/test.xhtml?foo=1234&fum=4567">test2</a><br/> </p> </body> </html> The above XML escapes the amperstand, as it must to do validate. Safari converts the & to the & entity. The & entity is left untouched. Thus both URL's are damaged at the time the server gets them. Is there a trick to get past this? 5023 18 gheorghe_flavian 2007-07-11 03:10:03 -0700 It' s not fixed! I have a similar problem with a download link that uses javascript . This website uses javascript to send a php file the name of the file and another parameter: <a onclick= return dld(php_file?param1=%2F&file='name')></a> This link works in all other browser tested: Opera, Firefox, Internet Explorer. Problem appears both on the Mac and Windows version of Safari (3.0.2 the Windows version). 5020 19 ap 2007-07-11 05:35:57 -0700 Ugh, reopening. There was no fix in this bug, and apparently no regression case, sadly. Broke between r18068 and r23922, I think we should find out when this happened (in case it was a test-less fix for some other bug). 4967 20 ap 2007-07-12 00:51:51 -0700 Hmm, I'm almost sure that I could reproduce this yesterday, but now I can not (of course, this still happens with shipping 10.4 Safari/WebKit, but that's not the point). Help with testing needed. > <a onclick= return dld(php_file?param1=%2F&file='name')></a> Gheorghe, this bug was only about XHTML, and your snippet is plain HTML. Please file a new bug for this issue. 4914 21 bryce1 2007-07-12 21:18:30 -0700 It works for me with the current webkit, and the http://www.citycarshare.org/ example posted above. 4915 22 ap 2007-07-12 21:26:00 -0700 OK, so I guess it was my testing mistake. Sorry for the noise. 2806 2005-07-05 04:41:53 -0700 2005-07-05 04:46:28 -0700 testcase application/xhtml+xml chartest.html application/xhtml+xml 241 joost PGh0bWw+Cgo8aGVhZD4KCTx0aXRsZT5jaGFyc2V0IHRlc3Q8L3RpdGxlPgo8L2hlYWQ+Cgo8Ym9k eT4KCiZhbXA7YW1wOyA9ICZhbXA7PGJyLz4gCiZhbXA7IzM4OyA9ICYjMzg7PGJyLz4KPGJyLz4K JmFtcDthbXA7IGluIGEgdXJsIDxhIGhyZWY9Ij9mb289MSZhbXA7YmFyPTIiPjE8L2E+PGJyLz4K JmFtcDsjMzg7IGluIGEgdXJsIDxhIGhyZWY9Ij9mb289MSYjMzg7YmFyPTIiPjI8L2E+Cgo8L2Jv ZHk+Cgo8L2h0bWw+Cg== 2807 2005-07-05 04:46:28 -0700 2005-07-05 04:56:35 -0700 testcase application xhtml+xml chartest.html application/xhtml+xml 390 joost PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPCFET0NUWVBFIGh0bWwgUFVC TElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgU3RyaWN0Ly9FTiIgImh0dHA6Ly93d3cudzMub3Jn L1RSL3hodG1sMS9EVEQveGh0bWwxLXN0cmljdC5kdGQiPgo8aHRtbD4KCjxoZWFkPgoJPHRpdGxl PmNoYXJzZXQgdGVzdDwvdGl0bGU+CjwvaGVhZD4KCjxib2R5PgoKJmFtcDthbXA7ID0gJmFtcDs8 YnIvPiAKJmFtcDsjMzg7ID0gJiMzODs8YnIvPgo8YnIvPgomYW1wO2FtcDsgaW4gYSB1cmwgPGEg aHJlZj0iP2Zvbz0xJmFtcDtiYXI9MiI+MTwvYT48YnIvPgomYW1wOyMzODsgaW4gYSB1cmwgPGEg aHJlZj0iP2Zvbz0xJiMzODtiYXI9MiI+MjwvYT4KCjwvYm9keT4KCjwvaHRtbD4K 2808 2005-07-05 04:51:11 -0700 2005-07-05 04:51:11 -0700 testcase text/html chartest.html text/html 390 joost PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPCFET0NUWVBFIGh0bWwgUFVC TElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgU3RyaWN0Ly9FTiIgImh0dHA6Ly93d3cudzMub3Jn L1RSL3hodG1sMS9EVEQveGh0bWwxLXN0cmljdC5kdGQiPgo8aHRtbD4KCjxoZWFkPgoJPHRpdGxl PmNoYXJzZXQgdGVzdDwvdGl0bGU+CjwvaGVhZD4KCjxib2R5PgoKJmFtcDthbXA7ID0gJmFtcDs8 YnIvPiAKJmFtcDsjMzg7ID0gJiMzODs8YnIvPgo8YnIvPgomYW1wO2FtcDsgaW4gYSB1cmwgPGEg aHJlZj0iP2Zvbz0xJmFtcDtiYXI9MiI+MTwvYT48YnIvPgomYW1wOyMzODsgaW4gYSB1cmwgPGEg aHJlZj0iP2Zvbz0xJiMzODtiYXI9MiI+MjwvYT4KCjwvYm9keT4KCjwvaHRtbD4K 2809 2005-07-05 04:52:34 -0700 2005-07-05 04:57:56 -0700 testcase text/xml chartest.html text/xml 390 joost PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPCFET0NUWVBFIGh0bWwgUFVC TElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgU3RyaWN0Ly9FTiIgImh0dHA6Ly93d3cudzMub3Jn L1RSL3hodG1sMS9EVEQveGh0bWwxLXN0cmljdC5kdGQiPgo8aHRtbD4KCjxoZWFkPgoJPHRpdGxl PmNoYXJzZXQgdGVzdDwvdGl0bGU+CjwvaGVhZD4KCjxib2R5PgoKJmFtcDthbXA7ID0gJmFtcDs8 YnIvPiAKJmFtcDsjMzg7ID0gJiMzODs8YnIvPgo8YnIvPgomYW1wO2FtcDsgaW4gYSB1cmwgPGEg aHJlZj0iP2Zvbz0xJmFtcDtiYXI9MiI+MTwvYT48YnIvPgomYW1wOyMzODsgaW4gYSB1cmwgPGEg aHJlZj0iP2Zvbz0xJiMzODtiYXI9MiI+MjwvYT4KCjwvYm9keT4KCjwvaHRtbD4K 2811 2005-07-05 04:56:35 -0700 2005-07-05 04:56:35 -0700 testcase application/xhtml+xml chartest.html application/xhtml+xml 427 joost PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPCFET0NUWVBFIGh0bWwgUFVC TElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgU3RyaWN0Ly9FTiIgImh0dHA6Ly93d3cudzMub3Jn L1RSL3hodG1sMS9EVEQveGh0bWwxLXN0cmljdC5kdGQiPgo8aHRtbCB4bWxucz0iaHR0cDovL3d3 dy53My5vcmcvMTk5OS94aHRtbCI+Cgo8aGVhZD4KCTx0aXRsZT5jaGFyc2V0IHRlc3Q8L3RpdGxl Pgo8L2hlYWQ+Cgo8Ym9keT4KCiZhbXA7YW1wOyA9ICZhbXA7PGJyLz4gCiZhbXA7IzM4OyA9ICYj Mzg7PGJyLz4KPGJyLz4KJmFtcDthbXA7IGluIGEgdXJsIDxhIGhyZWY9Ij9mb289MSZhbXA7YmFy PTIiPjE8L2E+PGJyLz4KJmFtcDsjMzg7IGluIGEgdXJsIDxhIGhyZWY9Ij9mb289MSYjMzg7YmFy PTIiPjI8L2E+Cgo8L2JvZHk+Cgo8L2h0bWw+Cg== 4014 2005-09-23 03:54:10 -0700 2005-09-23 09:29:46 -0700 Instruct libXML to parse entities entities.patch text/plain 744 info SW5kZXg6IFdlYkNvcmUva2h0bWwveG1sL3htbF90b2tlbml6ZXIuY3BwCj09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KUkNT IGZpbGU6IC9jdnMvcm9vdC9XZWJDb3JlL2todG1sL3htbC94bWxfdG9rZW5pemVyLmNwcCx2CnJl dHJpZXZpbmcgcmV2aXNpb24gMS40MQpkaWZmIC1wIC11IC1yMS40MSBXZWJDb3JlL2todG1sL3ht bC94bWxfdG9rZW5pemVyLmNwcAotLS0gV2ViQ29yZS9raHRtbC94bWwveG1sX3Rva2VuaXplci5j cHAJMjkgQXVnIDIwMDUgMjE6Mjk6MjQgLTAwMDAJMS40MQorKysgV2ViQ29yZS9raHRtbC94bWwv eG1sX3Rva2VuaXplci5jcHAJMjMgU2VwIDIwMDUgMTA6NDk6MTIgLTAwMDAKQEAgLTIzNyw2ICsy MzcsNyBAQCBzdGF0aWMgeG1sUGFyc2VyQ3R4dFB0ciBjcmVhdGVRU3RyaW5nUGFyCiAgICAgc3Rh dGljIGJvb2wgZGlkSW5pdCA9IGZhbHNlOwogICAgIGlmICghZGlkSW5pdCkgewogICAgICAgICB4 bWxJbml0UGFyc2VyKCk7CisgICAgICAgIHhtbFN1YnN0aXR1dGVFbnRpdGllc0RlZmF1bHQoMSk7 CiAgICAgICAgIHhtbFJlZ2lzdGVySW5wdXRDYWxsYmFja3MobWF0Y2hGdW5jLCBvcGVuRnVuYywg cmVhZEZ1bmMsIE5VTEwpOwogICAgICAgICB4bWxSZWdpc3Rlck91dHB1dENhbGxiYWNrcyhtYXRj aEZ1bmMsIG9wZW5GdW5jLCB3cml0ZUZ1bmMsIE5VTEwpOwogICAgICAgICBkaWRJbml0ID0gdHJ1 ZTsK