You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@struts.apache.org by "Dave Newton (JIRA)" <ji...@apache.org> on 2008/01/09 15:40:04 UTC

[jira] Issue Comment Edited: (WW-2319) tag should escape property values

    [ https://issues.apache.org/struts/browse/WW-2319?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=42959#action_42959 ] 

newton_dave edited comment on WW-2319 at 1/9/08 6:39 AM:
---------------------------------------------------------

The issue I ran in to was when I had a JavaScript tag as one of my properties (don't ask!) and I had JavaScript that was being executed twice. Escaping '<'s may be sufficient.

      was (Author: newton_dave):
    The issue I ran in to was when I had a JavaScript tag as one of my properties (don't ask!) and I had JavaScript that was being executed twice. Escaping &lt;s may be sufficient.
  
> <s:debug.../> tag should escape property values
> -----------------------------------------------
>
>                 Key: WW-2319
>                 URL: https://issues.apache.org/struts/browse/WW-2319
>             Project: Struts 2
>          Issue Type: Improvement
>    Affects Versions: 2.0.11, 2.1.0
>            Reporter: Dave Newton
>            Assignee: Dave Newton
>            Priority: Minor
>             Fix For: 2.1.1
>
>
> Edge case, but still a potential gotcha: the <s:debug.../> tag should escape HTML in property values.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.