RichTextArea does not html-escape quotation marks (") when getValue() is called.
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- Java
- Stars
- 1.8k
- Forks
- 717
- Avg merge
- 2d 6h
- Merged PRs (30d)
- 3
Description
If a user enters quotation marks (") into a RichTextArea, the marks are not html-escaped when getValue() is called. This leads to invalid html output. The marks should be escaped to "
Currently > (>) and < (<) are escaped.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the RichTextArea getValue() entry point and inspect how quotation marks are handled compared with the existing greater-than and less-than escaping. Confirm that quotation marks are escaped in the returned HTML and add or update a focused regression test if the surrounding tests provide one.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- frontend
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100