search

xiebiao / owaspantisamy

Automatically exported from code.google.com/p/owaspantisamy
0 stars 0 forks source link

Output is not valid HTML/XHTML #129

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Have version 1.4.5
2. As an input string use: <p>List</p>a<ul>b<li></li>c</ul>
3. Policy file
...
    <directives>
        <directive name="maxInputSize" value="300000"/>
        <directive name="useXHTML" value="true"/>
        <directive name="formatOutput" value="true"/>
...
    <tag-rules>
        <tag name="li" action="validate"/>
...

What is the expected output? What do you see instead?
Expected: <p>List</p>a<ul>bc</ul>
Actual: <p>List</p>a<ul>b<li</li>c</ul>

What version of the product are you using? On what operating system?
AS 1.4.5, Win 7 x64

Original issue reported on code.google.com by martin.p...@gmail.com on 13 Mar 2012 at 10:30

GoogleCodeExporter commented 9 years ago 
I'm unable to reproduce with versions 1.4.4 and 1.4.5 using the same directives 
and HTML.

Were you able to reproduce with 1.4.4 as well?

Original comment by tad...@gmail.com on 2 Apr 2012 at 7:41

GoogleCodeExporter commented 9 years ago 
I was not able to reproduce it with version 1.4.4, but in 1.4.5 it still 
happens. I looked into the code and found out, that it is caused by the 
ASHTMLSerializer. It is reliably reproducible using sax parser and useXHTML set 
to false.

Original comment by martin.p...@gmail.com on 13 Apr 2012 at 8:29

GoogleCodeExporter commented 9 years ago 
Ahh, with the SAX parser.  I hadn't tried that.  After trying the SAX parser, I 
was able to reproduce with 1.4.5.  I was able to reproduce regardless of 
useXHTML's value and formatOutput's value.

Original comment by tad...@gmail.com on 16 Apr 2012 at 4:18

GoogleCodeExporter commented 9 years ago

Original comment by arshan.d...@gmail.com on 22 Oct 2012 at 2:31