[Webkit-unassigned] [Bug 90667] [JSC] HTML extensions to String.prototype should escape " as " in argument values

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=90667





--- Comment #3 from Mathias Bynens <mathias at qiwi.be>  2012-08-04 12:49:57 PST ---
(In reply to comment #2)
> > '_'.link('a"b')
> "<a href="a"b">_</a>"
> 
> Seems to work as expected in V8.


That’s what I said in comment #0, no?

V8 does the right thing and escapes " as " correctly, but it also (needlessly) escapes some other characters, i.e. U+0027 APOSTROPHE and the < and > characters. These other escapes aren’t needed for security, and no other engine applies them. For this reason, I’ve filed a bug and submitted a patch against that behavior here: http://code.google.com/p/v8/issues/detail?id=2217

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.