Issue 10 in vuser: User update fails when password contains quotation marks

[codesite...@google.com]

Status: New
Owner: perlstalker
Labels: Type-Defect Priority-Medium

New issue 10 by perlstalker: User update fails when password contains
quotation marks
http://code.google.com/p/vuser/issues/detail?id=10

Moved from http://rt.cpan.org/Ticket/Display.html?id=50556
---

package VUser::Google::ProvisioningAPI::V2_0;
our $VERSION = '0.24';

# /usr/local/bin/perl -v
This is perl, v5.8.8 built for sun4-solaris

# uname -a
SunOS alyx 5.10 Generic_118833-17 sun4u sparc SUNW,Sun-Fire-V490

==============================================================================

We are using the following code to update a user's password (after creating
the
ProvisioningAPI object in $self->{google}):
my $updateEntry =
VUser::Google::ProvisioningAPI::V2_0::UserEntry->new();
$updateEntry->Password($pass);
my $userEntry = $self->{google}->UpdateUser($user, $updateEntry);

When an update is attempted to set a password containing the double-quote
character ("), we receive the following error:
File does not exist: Element type "apps:login" must
be followed by either attribute specifications,
">" or "/>". at
/usr/local/lib/perl5/site_perl/5.8.8/VUser/Google/ProvisioningAPI/V2_0.pm
line 443

I'm assuming that the double-quotes aren't being correctly escaped in the
XML,
or something similar. This may be a bug in the ProvisioningAPI, in the XML
module, or elsewhere. I'm filing it against the ProvisioningApi in the first
instance, but feel free to pass it on as you see fit. :-)

Thanks,
Chris

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

[codesite...@google.com]

Updates:
Status: Accepted

Comment #1 on issue 10 by perlstalker: User update fails when password

contains quotation marks
http://code.google.com/p/vuser/issues/detail?id=10

It's a bug in how quotes are escaped in passwords.