[Bug 24211] New: < should be quoted in attribute values

https://www.w3.org/Bugs/Public/show_bug.cgi?id=24211

            Bug ID: 24211
           Summary: < should be quoted in attribute values
           Product: WHATWG
           Version: unspecified
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: DOM Parsing and Serialization
          Assignee: [email protected]
          Reporter: [email protected]
        QA Contact: [email protected]
                CC: [email protected], [email protected],
                    [email protected], [email protected]

Quoting Victor's description and comments from Bug #24174:

The XML specification forbids < in attribute values.

Source 1: see the grammar for AttValue below.
http://www.w3.org/TR/REC-xml/#sec-common-syn

Source 2: http://www.w3.org/TR/REC-xml/#CleanAttrVals


The XML serialization algorithm in the DOM Parsing and Serialization
specification can produce < in XML attribute values.

https://dvcs.w3.org/hg/innerhtml/raw-file/tip/index.html#dfn-concept-serialize-xml-attributes

Specifically, step 2 substep 4 only quotes " and &. It should also quote < as
&lt;.

One more note -- all browsers currently quote both < (as ^&lt;) and > (as &gt;)
in XML attributes.

-- 
You are receiving this mail because:
You are on the CC list for the bug.