Re: Problem uploading (some) HTML files with PL/SQL Gateway

Mark C. Stock wrote:
> It appears that the PL/SQL gateway document upload cannot (or will not)
> upload a file that appears to have an HTML anchor in it (although extra
> whitespace does spoof it, if indeed, it's rejecting the file on purpose.
>
> After a lot of testing, I ended up with this fragment of HTML that causes
> the PL/SQL Gateway upload routine to fail:
>
> <a href="javascript:alert('set all');"><small><em>All</em></small></a></td>
>
> get rid of the '<' or the '=', and the file loads with no problem.
>
> Has anybody else experienced this or is anybody aware of any documention on
> this?
>
> Or could this be an HTTP issue?
>
> -- MCS
I haven't worked with the tool but what jumps out at me is the single quotes. When performing SQL and PL/SQL statements that involve single quotes we do it this way:

SELECT 'I Don''t know' FROM dual;

See it that helps.

-- 
Daniel Morgan
http://www.outreach.washington.edu/ext/certificates/oad/oad_crs.asp
http://www.outreach.washington.edu/ext/certificates/aoa/aoa_crs.asp
damorgan_at_x.washington.edu
(replace 'x' with a 'u' to reply)