JSF 1.2 injecting javaScript that causes w3c Validation failure

Question

One of the goals of our project, which has a heavy DDA requirement, is to ensure that the rendered HTML is 100% compliant with xhtml 1.0 transitional grammar. Sadly, I have one error I cannot eliminate. It's because JSF is injecting the following snippet of javaScript into the page (formatted for clarity) which, because it's not wrapped in CDATA, is rejected by the w3c validator with this message:

Line 443, Column 122: character "<" is the first character of a delimiter but occurred as data

…dp;if (adp != null) {for (var i = 0;i < adp.length;i++) {f.removeChild(adp[i])…

?

This message may appear in several cases:

    You tried to include the "<" character in your page: you should escape it as "&lt;"
    You used an unescaped ampersand "&": this may be valid in some contexts, but it is recommended to use "&amp;", which is always safe.
    Another possibility is that you forgot to close quotes in a previous tag.

My question is it is possible to get JSF to either wrap the script block in CDATA or externalise the script?

<script type="text/javascript" language="Javascript">
    function dpf(f) {
        var adp = f.adp;
        if (adp != null) {
            for (var i = 0;i < adp.length;i++) {
                f.removeChild(adp[i]);
     }}};

    function apf(f, pvp) {
        var adp = new Array();
        f.adp = adp;
        var ps = pvp.split(',');
        for (var i = 0,ii = 0;i < ps.length;i++,ii++) {
            var p = document.createElement("input");p.type = "hidden";p.name = ps[i];p.value = ps[i + 1];
            f.appendChild(p);
            adp[ii] = p;i += 1;
     }};

     function jsfcljs(f, pvp, t) {
        apf(f, pvp);
        var ft = f.target;
        if (t) {
            f.target = t;
        }
        f.submit();
        f.target = ft;dpf(f);
     };
</script>

BalusC · Accepted Answer · 2012-06-14 13:32:15Z

2

That's not possible without editing the JS file itself.

Extract jsf-impl.jar file, copy com/sun/faces/sunjsf.js file into the webapp project in exactly the same package structure, i.e. as a sunjsf.js file inside com.sun.faces package. Edit the < to < and save it. This file will get precedence over the one in the JAR file in classloading hierarchy and will thus be used instead.

Alternatively, you can also always rebuild the JAR file itself with the edited JS file.

answered Jun 14, 2012 at 13:32

BalusC

1.1m377 gold badges3.7k silver badges3.6k bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Steve Atkinson Over a year ago

Fantastic :) Once again I am in awe of your jsf skills.

Fabrizio Calderan · Accepted Answer · 2012-06-14 07:39:07Z

1

try to change your script block like so

<script type="text/javascript">
//<[!CDATA[

  ...your code here

//]]>
</script>

this should make the whole script block ignored by validator parser: if your code source contains characters like the greater than (>), less than (<) you have to put it in CDATA delimiters to make it validated.

answered Jun 14, 2012 at 7:39

Fabrizio Calderan

124k26 gold badges172 silver badges183 bronze badges

2 Comments

Fabrizio Calderan Over a year ago

so either you switch to another doctype (e.g. html5) or you just ignore the validator message...

Steve Atkinson Over a year ago

believe me, I would love to be able to ditch the xhtml requirement, but both that and grammar compliance are absolute immoveable requirements from our client, and they are very insistent on that - but BalusC has given me the answer I needed.

Collectives™ on Stack Overflow

JSF 1.2 injecting javaScript that causes w3c Validation failure

2 Answers 2

1 Comment

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related