Bug #680

_getAttrString always return htmlencoded attributes

Details

Submitted	2004-02-04 15:07 UTC
From	timo dot hummel at 4fb dot de
Assigned	mansion
Status	Bogus
Package	HTML_Common
PHP Version	Irrelevant
OS	any
Roadmaps	(Not assigned)

Comments

[2004-02-04 15:07 UTC] timo dot hummel at 4fb dot de

Description:
------------
the internal function _getAttrString returns all attributes as htmlencoded strings, thus making it impossible to set attributes in certain situations.

Example: If setting an attribute "onload" with some JavaScript behind it, it might fail if the htmlencoded string confuses the interpreter.

[2004-02-04 15:13 UTC] timo dot hummel at 4fb dot de

Additional note: It would be nice to disable htmlspecialchars for certain attributes.

[2004-04-27 08:44 UTC] bmansion at mamasam dot com

Thank you for taking the time to write to us, but this is not
a bug.

I don't see what is wrong with this behavior, sorry. Unless you can provide a real example, this won't be changed for obvious security and xhtml compliance reasons.