Bug 633271

Summary:	python-kid: serialization.py does not escape > to >
Product:	Red Hat Enterprise Linux 6	Reporter:	Till Maas <opensource>
Component:	python-kid	Assignee:	Charalampos Stratakis <cstratak>
Status:	CLOSED ERRATA	QA Contact:	Leos Pol <lpol>
Severity:	medium	Docs Contact:
Priority:	low
Version:	6.0	CC:	a.badger, bkabrda, bnater, cstratak, hhorak, icon, lpol, opensource, tlavigne
Target Milestone:	rc	Keywords:	FastFix, Patch, Reopened
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	python-kid-0.9.6-6.el6	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	528729	Environment:
Last Closed:	2017-03-21 09:59:13 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	528729
Bug Blocks:	1356061, 1373251

Description Till Maas 2010-09-13 13:12:17 UTC

+++ This bug was initially created as a clone of Bug #528729 +++

Created attachment 364592 [details]
This patch makes serialization.py escape > to &gt;

Description of problem:
Serialiazation.py does not escape > to &gt; this makes python-kid produce invalid xml, when <![CDATA[foo]]> is escaped by serialization.py.

Version-Release number of selected component (if applicable):
python-kid-0:0.9.6-5.1.el6.noarch

How reproducible:
always

Steps to Reproduce:
1.create a python kid template that contains a variable that expands to a string containing <![CDATA[foo]]>
2. produce the xhtml 1.0 strict 
3. run xmllint on the file
  
Actual results:
xmmlint complains:
xmllint debug 
debug:197: parser error : Sequence ']]>' not allowed in content
      &lt;![CDATA[
          ^
debug:197: parser error : Sequence ']]>' not allowed in content
      ]]>
      ^
debug:197: parser error : internal error
      ]]>
      ^
debug:197: parser error : Extra content at the end of the document
      ]]>
      ^

Expected results:
xmllint does not complain

Comment 2 Toshio Ernie Kuratomi 2010-09-13 15:07:25 UTC

Note:  Till is the owner of python-kid in Fedora and the patch he provides has been applied to the Fedora package since January.

Comment 4 RHEL Program Management 2011-01-07 15:57:09 UTC

This request was evaluated by Red Hat Product Management for
inclusion in the current release of Red Hat Enterprise Linux.
Because the affected component is not scheduled to be updated
in the current release, Red Hat is unfortunately unable to
address this request at this time. Red Hat invites you to
ask your support representative to propose this request, if
appropriate and relevant, in the next release of Red Hat
Enterprise Linux. If you would like it considered as an
exception in the current release, please ask your support
representative.

Comment 11 errata-xmlrpc 2017-03-21 09:59:13 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2017-0634.html