Bad attributes/data handling in SGMLib

[wolfete]

BPO	1745761
Nosy	@devdanzin, @ezio-melotti, @merwok, @bitdancer
Files	bug_sgml.py: example

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/ezio-melotti'
closed_at = <Date 2011-11-14.17:01:54.870>
created_at = <Date 2007-06-30.16:38:49.000>
labels = ['easy', 'type-bug', 'library']
title = 'Bad attributes/data handling in SGMLib'
updated_at = <Date 2011-11-14.17:01:54.867>
user = 'https://bugs.python.org/wolfete'

bugs.python.org fields:

activity = <Date 2011-11-14.17:01:54.867>
actor = 'ezio.melotti'
assignee = 'ezio.melotti'
closed = True
closed_date = <Date 2011-11-14.17:01:54.870>
closer = 'ezio.melotti'
components = ['Library (Lib)']
creation = <Date 2007-06-30.16:38:49.000>
creator = 'wolfete'
dependencies = []
files = ['2411']
hgrepos = []
issue_num = 1745761
keywords = ['easy']
message_count = 5.0
messages = ['32431', '85628', '116699', '147613', '147618']
nosy_count = 6.0
nosy_names = ['wolfete', 'ajaksu2', 'ezio.melotti', 'eric.araujo', 'r.david.murray', 'python-dev']
pr_nums = []
priority = 'normal'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'behavior'
url = 'https://bugs.python.org/issue1745761'
versions = ['Python 2.7', 'Python 3.2', 'Python 3.3']

[wolfete]

When feeding an parser with a tag in which its arguments contain a < (as in <a href='http://www.example.org/"\<;'>example</a> the SGMLParsers doesn't handle the data/arguments correcly. For example, with the above string I get:

Fed: <a href='http://www.example.org/"\>;'\>example\</a>
Tag opened: a
Arg href -> http://www.example.org/"\>;
Arg escaped 'http://www.example.org/"\>;'
Data: ;'>example
Tag closed: a

I have attached a small example.

I'm using python2.5.1

Cheers,

�lvaro.

[devdanzin]

Confirmed in trunk.

[BreamoreBoy]

Can we close this as sgmllib only supported htmllib which has been superseded by HTMLParser?

[python-dev]

New changeset 3c3009f63700 by Ezio Melotti in branch '2.7':
bpo-1745761, bpo-755670, bpo-13357, bpo-12629, bpo-1200313: improve attribute handling in HTMLParser.
http://hg.python.org/cpython/rev/3c3009f63700

New changeset 16ed15ff0d7c by Ezio Melotti in branch '3.2':
bpo-1745761, bpo-755670, bpo-13357, bpo-12629, bpo-1200313: improve attribute handling in HTMLParser.
http://hg.python.org/cpython/rev/16ed15ff0d7c

New changeset 426f7a2b1826 by Ezio Melotti in branch 'default':
bpo-1745761, bpo-755670, bpo-13357, bpo-12629, bpo-1200313: merge with 3.2.
http://hg.python.org/cpython/rev/426f7a2b1826

[ezio-melotti]

Fixed, thanks for the report!