This sounds like something we need to address. Please open a bug report if
one isn't already there and we'll get to it pronto.

----- Original Message -----
From: "Fredrik Lindgren" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, August 28, 2003 1:11 AM
Subject: [OS-webwork] Is html/xml escaping performed in webwork2 view
implementation?


> Hi,
> I've spent some time going through the current webwork2 UI implementation
> trying to find out if escaping of special characters ('<,>,",',&) is done.
> In webwork 1.3, at least the jsp UI templates will perform escaping since
> they use the property tag which escapes the values as long as you don't
> tell it not to. Since I'm not familiar with velocity it is harder for me
to
> verify that the escaping is done by the velocity templates as well. If
> escaping is in fact done in webwork2, please explain how.
>
> --
> Regards,
> Fredrik Lindgren
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Opensymphony-webwork mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/opensymphony-webwork
>


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Opensymphony-webwork mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/opensymphony-webwork

Reply via email to