Hi list,
blob content also needs html escaping and it's what this patch is for :)
regards,
Dziugas Baltrunas
Index: DbBlobContentTag.java
===================================================================
RCS file: /cvsroot/jdbforms/dbforms/src/org/dbforms/taglib/DbBlobContentTag.java,v
retrieving revision 1.17
diff -u -r1.17 DbBlobContentTag.java
--- DbBlobContentTag.java 5 Aug 2004 14:21:15 -0000 1.17
+++ DbBlobContentTag.java 9 Aug 2004 14:41:30 -0000
@@ -123,7 +123,7 @@
sqle.printStackTrace();
}
- pageContext.getOut().write(contentBuf.toString());
+ pageContext.getOut().write(escapeHtml(contentBuf.toString()));
} catch (java.io.IOException ioe) {
throw new JspException("IO Error: " + ioe.getMessage());
}