bug#75998: [guile-lib] html->sxml does not decode entities in attributes

Tomas Volf <[email protected]> Sun, 02 Feb 2025 10:57:03 +0100
Newsgroups gmane.lisp.guile.bugs
Message-ID <[email protected]>
<[email protected]> writes:

> On Sat, Feb 01, 2025 at 09:10:04PM +0100, Tomas Volf wrote:
>> 
>> Hello,
>> 
>> I think I found a bug in the htmlprag module in guile-lib.  When parsing
>> attributes, the values are not properly decoded:
>> 
>> --8<---------------cut here---------------start------------->8---
>> scheme@(guile-user)> ,use (htmlprag)
>> scheme@(guile-user)> (html->sxml "<hr aaa=\"bbb&quot;ccc'ddd\" />")
>> $1 = (*TOP* (hr (@ (aaa "bbb&quot;ccc'ddd"))))
>> scheme@(guile-user)> (html->sxml "<a href=\"a&amp;b\" />")
>> $2 = (*TOP* (a (@ (href "a&amp;b"))))
>> --8<---------------cut here---------------end--------------->8---
>> 
>> I think that $1 should be "bbb\"ccc'ddd" and $2 should be "a&b".
>
> Ouch. Have you contacted Oleg Kiselyov about it? He's usually pretty
> responsive and very friendly.

I did not.  I did not find a "how to report bugs" section on guile-lib's
website, and on the (htmlprag) documentation section Oleg Kiselyov is
mentioned only in one sentence as a "Thanks".

I think I have managed to find his email in one Haskell paper of his, so
I will CC him on the bug report, as suggested.

Thanks,
Tomas

-- 
There are only two hard things in Computer Science:
cache invalidation, naming things and off-by-one errors.
signature.asc (application/pgp-signature, 853 B)
-----BEGIN PGP SIGNATURE-----
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=NDGY
-----END PGP SIGNATURE-----