ZPT escapes attributes when it shouldn't

[Bug Importer]

ZPT escapes the ampersand of character entities
in attributes. They should not be escaped since
they are legal HTML and needed to make accented
characters, for example in <img alt="">

To check this, put the following line in a Template
and view the result.

<span alt="&aacute;"></span>

[Evan Simpson (evan-4-am)]

Status: Pending => Resolved

Fixed in CVS trunk by not escaping ampersands in attributes that start off a syntactically valid character entity. Note that this includes semantic nonsense such as "&blah;" and "&#99999999999;" as well as valid entities such as "&aacute;" and "&#100;".

[Christian Theune (ctheune)]

Status: Resolved => Pending

I currently discovered this behaviour on a HEAD checkout from 2003/07/14.

Is it possible this bug slipped in again? Also in XML mode i discovered that the attributes are presented after character reference substitution (happens only in the attributes, not the rest of the document).

So this happens to an attribute "string:&#xe4;":

            Macro-Expansion On | Macro-Expansion Off

XML-Mode "string:ä" | "string:&#xe4;":

HTML-Mode "string:&amp;#xe4;" | "string:&#xe4;":

I tried to locate it further. It happens somewhere in the
interpret() method from the TALInterpreter.

[Christian Theune (ctheune)]

Changes: edited transcript, revised version_info

[Evan Simpson (evan-4-am)]

This *should* be fixed now in the CVS trunk and 2.7 branch. Interested parties please test and comment.

[ChrisW (chris-simplistix)]

Status: Pending => Deferred

Final call for testing Evan's fixes for this.

If no-one's having problems, this will get marked as resolved in a month's time...

[ChrisW (chris-simplistix)]

Status: Deferred => Resolved

No response, so I'm assuming the testing went fine, so marking as resolved.

[Larry Bates (lbates35476)]

Seems that this was resolved prematurely. It is still escaping ampersands in 2.7.4-0 version that I'm using.

[ChrisW (chris-simplistix)]

Status: Resolved => Pending

Then you should have "resubmit" -ed ;-)
I have now...

Please provde a clear explanation of your problem with details steps on how to reproduce.

[Andres Herrera (andresh)]

Hi, continues even with the problems in the newer versions?

[Hanno Schlichting (hannosch)]

Tested the "<span alt="&aacute;"></span>" snippet in a page template in Zope 2.12 and it doesn't quote the ampersand but keeps the entity intact.