283746 - escaped quotes broken

Status: RESOLVED INVALID

(Firefox :: General, defect)

Description

[Alan Batie]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

In the example page listed, the following input field declaration:

Text field: <input name=stuff type=text size=50 value="This is some
\"pre-filled\", quoted data">

Gets rendered as:

Text field: <input name=stuff type=text size=50 value="This is some
\"pre-filled\, quoted data>

Reproducible: Always

Steps to Reproduce:
1.  See the example page
2.
3.



Expected Results:  
Properly handled the escapes so that all of the text was entered into the input
field.

Comment 1

[Alan Batie]

On further research, it looks like in someone's infinite wisdom, escaping is not
part of the html spec.  From "http://www.w3schools.com/html/html_elements.asp":

In some rare situations, like when the attribute value itself contains quotes,
it is necessary to use single quotes:

name='John "ShotGun" Nelson'


I still consider it a bug, but apparently it's a bug in HTML, not in Firefox...

Comment 2

[Dennis Jacobfeuerborn]

If you are using a string with quotes for the name attribute you are shooting
yourself in the foot and I don't think it's actually valid (didn't check the
specs though).
To use a string with quotes in the value attribute use html entities:

value="this "is a" test"

Comment 3

[Alan Batie]

Thanks, I forgot about that and it seems to do the right thing (i.e. it's not
ending up getting into the data in the database).