Bug 123914

Summary:

XMLSerializer does not escape '<' in script and style element in xhtml document

Product:

WebKit

Reporter:

Victor Costan <costan>

Component:

DOM

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

ap, cdumez, commit-queue, darin, rniwa

Priority:

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Attachments:

Description	Flags
Patch	none

Description Victor Costan 2013-11-06 12:38:49 PST

The following Chromium bug documents the issue and has step-by-step repro steps.
http://crbug.com/263754

I prepared a patch for Blink that is in the process of getting committed. This bug is for tracking my progress on porting the patch to WebKit.
https://codereview.chromium.org/26193002/

I filed the bug under "HTML DOM", but the fix will go under WebCore/editing.

Comment 1 Victor Costan 2013-11-06 12:52:58 PST

Created attachment 216209 [details]
Patch

Comment 2 Victor Costan 2013-11-13 17:02:09 PST

Chris, I think this would help HTML5 compliance, so I'm cc-ing you on it.

Chromium already implements this behavior, as well as Firefox and IE10.

Comment 3 WebKit Commit Bot 2013-11-14 18:25:51 PST

Comment on attachment 216209 [details]
Patch

Clearing flags on attachment: 216209

Committed r159326: <http://trac.webkit.org/changeset/159326>

Comment 4 WebKit Commit Bot 2013-11-14 18:25:53 PST

All reviewed patches have been landed.  Closing bug.

Comment 5 Victor Costan 2013-11-14 19:22:24 PST

Thank you very much, Darin!