You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@struts.apache.org by "Dave Newton (JIRA)" <ji...@apache.org> on 2008/01/09 15:40:04 UTC
[jira] Issue Comment Edited: (WW-2319) tag should
escape property values
[ https://issues.apache.org/struts/browse/WW-2319?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=42959#action_42959 ]
newton_dave edited comment on WW-2319 at 1/9/08 6:39 AM:
---------------------------------------------------------
The issue I ran in to was when I had a JavaScript tag as one of my properties (don't ask!) and I had JavaScript that was being executed twice. Escaping '<'s may be sufficient.
was (Author: newton_dave):
The issue I ran in to was when I had a JavaScript tag as one of my properties (don't ask!) and I had JavaScript that was being executed twice. Escaping <s may be sufficient.
> <s:debug.../> tag should escape property values
> -----------------------------------------------
>
> Key: WW-2319
> URL: https://issues.apache.org/struts/browse/WW-2319
> Project: Struts 2
> Issue Type: Improvement
> Affects Versions: 2.0.11, 2.1.0
> Reporter: Dave Newton
> Assignee: Dave Newton
> Priority: Minor
> Fix For: 2.1.1
>
>
> Edge case, but still a potential gotcha: the <s:debug.../> tag should escape HTML in property values.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.