Details
-
Bug
-
Resolution: Unresolved
-
Low
-
None
-
4.0, 4.2, 5.0 - EAP
-
4
-
Severity 3 - Minor
-
Description
The "&" character in the value (user login name) is not properly escaped by the User Picker custom field in the XML view. (Probably in other user custom field types too.)
Reproduction sequence:
1. Create a user with login name "a&b"
2. Create a User Picker custom field
3. On any issue, set the value of the field to that user.
4. Open XML view of the issue
Observed:
<customfieldvalue>a&b</customfieldvalue>
Expected:
<customfieldvalue>a&b</customfieldvalue>
or
<customfieldvalue><![CDATA[a&b]]></customfieldvalue>
Note that when the Assignee is set to that user, the login name is properly escaped.
Attachments
Issue Links
- is related to
-
JRASERVER-26846 "Select List" custom field values are not escaped in CDATA in issue XML view, leading to invalid XML
- Closed