Page 1 of 1

Awasu incorrectly parses escaped HTML in a pre tag

Posted: Sun Jan 18, 2004 6:41 pm
by davebryant
The following extract from a feed contains some HTML within the description that should be displayed within a table. The HTML is properly escaped using & lt; and & gt; (spaces added to avoid problems with display). However, when processing the feed, Awasu runs the embedded script and so always displays a message box 'main loaded'. When the feed is actually opened and IE is used to retrieve the page, it is all processed correctly and the message box is not displayed.

While this is not too bad on its own, it becomes really annoying when there are 5 or 6 of these on a single feed, as they produce a number of message boxes in sequence, all of which are modal and so must be dismissed before anything else can be done.

Code: Select all

<p>Consider the following two pages.</p>

<tt>main.htm</tt>:<pre>& lt;html& gt;
   & lt;body onload="alert( 'main loaded' )"& gt;
      & lt;iframe src="iframe.htm"/& gt;
   & lt;/body& gt;
& lt;/html& gt;
</pre><tt>iframe.htm</tt>:<pre>& lt;html& gt;
   & lt;body onload="alert( 'iframe loaded' )"/& gt;
& lt;/html& gt;
</pre>Contrary to what I thought, the main page <code>onload</code> event will trigger before the iframe page <code>onload</code> event when <tt>main.htm</tt> is loaded.


(Spaces added to prevent display problems with & lt; and & gt;)

duplicate bug - disregard

Posted: Sun Jan 18, 2004 8:22 pm
by davebryant
I didn't notice that this had already been reported - this bug report can therefore be disregarded.

Re: duplicate bug - disregard

Posted: Sun Jan 18, 2004 10:37 pm
by support
This will be fixed in the next beta.

The workaround until then is to open the channel's properties and set the feed item format to "plain-text."