http://forge.typo3.org/http://forge.typo3.org/themes/typo3_forge/favicon/favicon.png?17058661692020-08-19T14:42:08ZTYPO3 ForgeTYPO3 Core - Bug #92051: f:asset.script breaks ampersands and thus functionalityhttp://forge.typo3.org/issues/92051?journal_id=4295042020-08-19T14:42:08ZOliver Haderoliver.hader@typo3.org
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Needs Feedback</i></li></ul><p>Setting the second parameter to <code>false</code> would allow cross-site scripting → we don't want that...<br />Probably <code>ScriptViewHelper</code> has to be adjusted. In any way, having automated tests for that would help here.</p> TYPO3 Core - Bug #92051: f:asset.script breaks ampersands and thus functionalityhttp://forge.typo3.org/issues/92051?journal_id=4295062020-08-19T14:44:32ZOliver Haderoliver.hader@typo3.org
<ul><li><strong>Related to</strong> <i><a class="issue tracker-2 status-5 priority-3 priority-lowest closed" href="/issues/90522">Feature #90522</a>: Introduce AssetCollector</i> added</li></ul> TYPO3 Core - Bug #92051: f:asset.script breaks ampersands and thus functionalityhttp://forge.typo3.org/issues/92051?journal_id=4295072020-08-19T14:46:38ZOliver Haderoliver.hader@typo3.org
<ul><li><strong>Status</strong> changed from <i>Needs Feedback</i> to <i>New</i></li></ul> TYPO3 Core - Bug #92051: f:asset.script breaks ampersands and thus functionalityhttp://forge.typo3.org/issues/92051?journal_id=4295232020-08-19T20:22:16ZRaphael Zschorschrafu1987@gmail.com
<ul></ul><p>I only set the parameter to false to check if it has something to do with htmlspecialchars :)</p> TYPO3 Core - Bug #92051: f:asset.script breaks ampersands and thus functionalityhttp://forge.typo3.org/issues/92051?journal_id=4352152020-11-18T08:06:58ZRaphael Zschorschrafu1987@gmail.com
<ul><li><strong>Related to</strong> <i><a class="issue tracker-1 status-5 priority-4 priority-default closed" href="/issues/92284">Bug #92284</a>: <f:asset.script> ViewHelper double escape the src attribute</i> added</li></ul> TYPO3 Core - Bug #92051: f:asset.script breaks ampersands and thus functionalityhttp://forge.typo3.org/issues/92051?journal_id=4952292023-06-24T14:56:58ZRiccardo De Contardierredeco@gmail.com
<ul></ul><p>I think it has been solved: I performed the following test on TYPO3 11.x, 12.x, 13.x:</p>
<p>- add the following code to my Fluid page template:</p>
<pre>
<f:asset.script identifier="googleApi" src="https://maps.googleapis.com/maps/api/js?key=API_KEY&libraries=places" />
</pre>
<a name="Result"></a>
<h2 >Result<a href="#Result" class="wiki-anchor">¶</a></h2>
<p>on all the TYPO3 version tested the output has been:</p>
<pre>
<script src="https://maps.googleapis.com/maps/api/js?key=API_KEY&amp;libraries=places"></script>
</pre> TYPO3 Core - Bug #92051: f:asset.script breaks ampersands and thus functionalityhttp://forge.typo3.org/issues/92051?journal_id=4952302023-06-24T15:18:51ZRiccardo De Contardierredeco@gmail.com
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Closed</i></li></ul><p>I have been confirmed that the problem has been solved with <a class="external" href="https://forge.typo3.org/issues/92284">https://forge.typo3.org/issues/92284</a> - closing this issue.</p>
<p>If you think that this is the wrong decision or experience the issue again, please reopen it or open a new issue with a reference to this one. Thank you.</p>