You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Greg <em...@gregorybittar.com> on 2000/08/07 23:27:49 UTC

"

If you have to escape the double quote mark in HTML, you use '&quot'.
Something like this:

<tr><td><input type="checkbox" name="<%=tagAttributeName %>"
value="<%=tagAttributeValue %>" CHECKED /> <%=tagAttributeValue %>
</td></tr>

isn't going to work out to well if your <%=tagAttributeName %> has a
double quote of its own imbedded.  Even if you use '&quot;' instead of a
double quote mark, it's still going to boil down to the same problem
when the form is posted.   The '&quot;' gets translated into a double
quote mark, and now your tagAttributeName has been truncated right up
until the character before your unintended string terminator.

- GB