I've logged issue 411 [1] to track this problem.
[1]
https://javaserverfaces.dev.java.net/issues/show_bug.cgi?id=411
Jacob Hookom wrote:
> I'm using the nightly from Sept 23rd with Facelets and have been able
> to replicate this user's issue:
>
> https://facelets.dev.java.net/issues/show_bug.cgi?id=164
>
> I can trace Facelets assigning that input as "<strong>...</strong>"
> without any escaping or entity codes. But when that String is passed
> to HtmlUtils, you get the output that was described in the bug. I've
> also tested the same behavior coming from EL values.
>
> The bug includes the lines in HtmlUtils that cause this behavior-- I'm
> wondering what the desired workaround is? I've also been trying to
> track down in the HTML spec that describes this behavior.
>
> Thanks!!!
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe_at_javaserverfaces.dev.java.net
> For additional commands, e-mail: dev-help_at_javaserverfaces.dev.java.net
>