You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@struts.apache.org by "Dave Newton (JIRA)" <ji...@apache.org> on 2007/11/13 20:26:34 UTC
[jira] Created: (WW-2319) tag should escape property
values
<s:debug.../> tag should escape property values
-----------------------------------------------
Key: WW-2319
URL: https://issues.apache.org/struts/browse/WW-2319
Project: Struts 2
Issue Type: Improvement
Affects Versions: 2.0.11, 2.1.0
Reporter: Dave Newton
Priority: Minor
Edge case, but still a potential gotcha: the <s:debug.../> tag should escape HTML in property values.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Assigned: (WW-2319) tag should escape property
values
Posted by "Dave Newton (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/struts/browse/WW-2319?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dave Newton reassigned WW-2319:
-------------------------------
Assignee: Dave Newton
> <s:debug.../> tag should escape property values
> -----------------------------------------------
>
> Key: WW-2319
> URL: https://issues.apache.org/struts/browse/WW-2319
> Project: Struts 2
> Issue Type: Improvement
> Affects Versions: 2.0.11, 2.1.0
> Reporter: Dave Newton
> Assignee: Dave Newton
> Priority: Minor
> Fix For: 2.1.0
>
>
> Edge case, but still a potential gotcha: the <s:debug.../> tag should escape HTML in property values.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (WW-2319) tag should escape property
values
Posted by "Dave Newton (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/struts/browse/WW-2319?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dave Newton updated WW-2319:
----------------------------
Fix Version/s: 2.1.0
> <s:debug.../> tag should escape property values
> -----------------------------------------------
>
> Key: WW-2319
> URL: https://issues.apache.org/struts/browse/WW-2319
> Project: Struts 2
> Issue Type: Improvement
> Affects Versions: 2.0.11, 2.1.0
> Reporter: Dave Newton
> Assignee: Dave Newton
> Priority: Minor
> Fix For: 2.1.0
>
>
> Edge case, but still a potential gotcha: the <s:debug.../> tag should escape HTML in property values.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (WW-2319) tag should escape
property values
Posted by "Dave Newton (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/struts/browse/WW-2319?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=42959#action_42959 ]
Dave Newton commented on WW-2319:
---------------------------------
The issue I ran in to was when I had a JavaScript tag as one of my properties (don't ask!) and I had JavaScript that was being executed twice. Escaping <s may be sufficient.
> <s:debug.../> tag should escape property values
> -----------------------------------------------
>
> Key: WW-2319
> URL: https://issues.apache.org/struts/browse/WW-2319
> Project: Struts 2
> Issue Type: Improvement
> Affects Versions: 2.0.11, 2.1.0
> Reporter: Dave Newton
> Assignee: Dave Newton
> Priority: Minor
> Fix For: 2.1.1
>
>
> Edge case, but still a potential gotcha: the <s:debug.../> tag should escape HTML in property values.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Issue Comment Edited: (WW-2319) tag should
escape property values
Posted by "Dave Newton (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/struts/browse/WW-2319?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=42959#action_42959 ]
newton_dave edited comment on WW-2319 at 1/9/08 6:39 AM:
---------------------------------------------------------
The issue I ran in to was when I had a JavaScript tag as one of my properties (don't ask!) and I had JavaScript that was being executed twice. Escaping '<'s may be sufficient.
was (Author: newton_dave):
The issue I ran in to was when I had a JavaScript tag as one of my properties (don't ask!) and I had JavaScript that was being executed twice. Escaping <s may be sufficient.
> <s:debug.../> tag should escape property values
> -----------------------------------------------
>
> Key: WW-2319
> URL: https://issues.apache.org/struts/browse/WW-2319
> Project: Struts 2
> Issue Type: Improvement
> Affects Versions: 2.0.11, 2.1.0
> Reporter: Dave Newton
> Assignee: Dave Newton
> Priority: Minor
> Fix For: 2.1.1
>
>
> Edge case, but still a potential gotcha: the <s:debug.../> tag should escape HTML in property values.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (WW-2319) tag should escape property
values
Posted by "Don Brown (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/struts/browse/WW-2319?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Don Brown resolved WW-2319.
---------------------------
Resolution: Fixed
Assignee: Don Brown (was: Dave Newton)
Changed the Freemarker template to escape all outputted values. Reopen if I missed one.
> <s:debug.../> tag should escape property values
> -----------------------------------------------
>
> Key: WW-2319
> URL: https://issues.apache.org/struts/browse/WW-2319
> Project: Struts 2
> Issue Type: Improvement
> Affects Versions: 2.0.11, 2.1.0
> Reporter: Dave Newton
> Assignee: Don Brown
> Priority: Minor
> Fix For: 2.1.1
>
>
> Edge case, but still a potential gotcha: the <s:debug.../> tag should escape HTML in property values.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (WW-2319) tag should escape property
values
Posted by "Tom Schneider (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/struts/browse/WW-2319?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tom Schneider updated WW-2319:
------------------------------
Fix Version/s: (was: 2.1.0)
2.1.1
> <s:debug.../> tag should escape property values
> -----------------------------------------------
>
> Key: WW-2319
> URL: https://issues.apache.org/struts/browse/WW-2319
> Project: Struts 2
> Issue Type: Improvement
> Affects Versions: 2.0.11, 2.1.0
> Reporter: Dave Newton
> Assignee: Dave Newton
> Priority: Minor
> Fix For: 2.1.1
>
>
> Edge case, but still a potential gotcha: the <s:debug.../> tag should escape HTML in property values.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.