backtick saving bug

Description:

Internet Explorer 8 Save To Disk damages documents with backticks in
attribute values.

Steps to reproduce:

1. Create a HTML document containing the code
<INPUT TYPE=SUBMIT VALUE="`" DISABLED >
2. Open the document in Microsoft Internet Explorer.
3. Tell Microsoft Internet Explorer to save the document to disk as bare
HTML using ISO encoding.
4. Open the saved document in Microsoft Internet Explorer.

Expected result:
4. The saved page should display the same content as the original page.

Actual result:
4. The saved page displays the HTML code for the INPUT control.

Please fix.

----------------
This post is a suggestion for Microsoft, and Microsoft responds to the
suggestions with the most votes. To vote for this suggestion, click the "I
Agree" button in the message pane. If you do not see the button, follow this
link to open the suggestion in the Microsoft Web-based Newsreader and then
click "I Agree" in the message pane.

http://www.microsoft.com/communities...orer. general

Krzysztof ¯elechowski wrote:

> Internet Explorer 8 Save To Disk damages documents with backticks in
> attribute values.
>
> Steps to reproduce:
>
> 1. Create a HTML document containing the code
> <INPUT TYPE=SUBMIT VALUE="`" DISABLED >
> 2. Open the document in Microsoft Internet Explorer.
> 3. Tell Microsoft Internet Explorer to save the document to disk as
> bare HTML using ISO encoding.
> 4. Open the saved document in Microsoft Internet Explorer.
>
> Expected result:
> 4. The saved page should display the same content as the original page.
>
> Actual result:
> 4. The saved page displays the HTML code for the INPUT control.

I'm not an HTML or Javascript guru but I suspect the backquote is a special
character that must be escaped or you use a HTML character entity reference
(`) to express that character. I'm guessing but maybe the backquote
escapes an expression to be evaluated or injects code so you need to escape
it to use it as just a character. The HTML newsgroups is where you need to
visit for better gurus on HTML.

Escape it (\`), use the entity reference (`), or capture the input value
into a string and then encode that string to insert the HTML entity
characters (see the code in the following discussion on how to encode the
string).

http://www.ibm.com/developerworks/fo...hreadID=256586