Uploaded image for project: 'Confluence Cloud'
  1. Confluence Cloud
  2. CONFCLOUD-36989

#parse('child-template.vm') does not render values HTML escaped

    XMLWordPrintable

Details

    • Bug
    • Resolution: Cannot Reproduce
    • Low
    • None
    • None
    • Tested in 5.6 and 5.7

    Description

      NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report.

      When velocity renders a top level template, any $value references are HTML escaped.
      If a child.vm template is parsed within top.vm and the same $value is referenced inside the child.vm template, the value is not HTML escaped.

      Documentation on HtmlSafe leaves the impression that all values references are escaped by default.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              10058912f876 Ulrich Kuhnhardt [Comalatech]
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: