This repository was archived by the owner on Mar 20, 2021. It is now read-only.
This repository was archived by the owner on Mar 20, 2021. It is now read-only.
No escaping when <f:Selectitems> is used with a Map #4411
Description
If its values attributed is backed by a Map, <f:selectItems> ignores all other attributes, including itemLabelEscaped. Even worse, in this case the itemLabelEscaped attribute does not default to true, as specified here, but to false. Therefore the whole items list gets rendered without any escaping.
The culprit seems to be SelectItemsIterator, which fails to evaluate all attributes for Maps. It does so for SelectItem objects, arrays or Collections, though.