From spadgett at us.ibm.com Sun Aug 7 13:00:51 2011 From: spadgett at us.ibm.com (Samuel Padgett) Date: Sun, 7 Aug 2011 13:00:51 -0400 Subject: [oslc-core] OSLC Compact representation, titles with markup Message-ID: I believe the spec is a bit confusing when it comes to titles with markup for UI Preview. The Compact representation has a dcterms:title property. It's defined as an XML Literal that can contain XHTML markup [1]. My understanding of XML Literals as discussed in the RDF Primer [2] means a title with markup would look like this, 12345: Null pointer exception during startup The example [3] of this resource has a title like this, however, 12345: <s>Null pointer exception during startup</s> The example doesn't seem to fit with the description. It's very difficult to parse the former using XPath. For instance, the expression "/oslc:Compact/dcterms:title" takes out the "" and "" Most implementations I'm aware also follow the example where markup is encoded. It means special characters need to be "double encoded." For instance, "12345: Values > 1000 incorrectly calculated" would be, 12345: Values &gt; 1000 incorrectly calculated I think we should add more clarity to the spec here, as getting this wrong can open up consumers to cross-site scripting attacks. I'd also suggest we say that providers MUST NOT use any markup with a