of your web.xml file -- if you see it is
referencing the 2.3 DTD, you need to change it the 2.4 schema.
Thanks,
Paul
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 23, 2005 2:39 PM
To: user@struts.apache.org
Subject: EL Mystery
I
I have been trying to solve a mystery concerning EL.
We are using 4 taglibs in our project:
%-- JSTL tag libs --%
%@ taglib prefix=fmt uri=/WEB-INF/fmt.tld %
%@ taglib prefix=c uri=/WEB-INF/c.tld %
%-- Struts provided Taglibs --%
%@ taglib prefix=html uri=/WEB-INF/struts-html-el.tld %
%@
PROTECTED]
Sent: Wednesday, March 23, 2005 2:39 PM
To: user@struts.apache.org
Subject: EL Mystery
I have been trying to solve a mystery concerning EL.
We are using 4 taglibs in our project:
%-- JSTL tag libs --%
%@ taglib prefix=fmt uri=/WEB-INF/fmt.tld %
%@ taglib prefix=c uri=/WEB-INF/c.tld
On Wed, 23 Mar 2005 19:38:39 +, [EMAIL PROTECTED]
[EMAIL PROTECTED] wrote:
Can some one shed some light on this mystery? Also I have heard that using EL
outside of tags can be a security problem and that it is better to use a
c:out value=${EL}/ instead.
The security part of this was
So, it's as much of security risk as bean:write? I mean you could turn the
filter off and get the same effect?
Leon
Von: Jeff Beal [mailto:[EMAIL PROTECTED]
Gesendet: Mittwoch, 23. März 2005 21:56
An: Struts Users Mailing List
Betreff: Re: EL Mystery
On Wed, 23 Mar 2005 19:38:39 +
So, it's as much of security risk as bean:write? I mean you could turn the
filter off and get the same effect?
Leon
Von: Jeff Beal [mailto:[EMAIL PROTECTED]
Gesendet: Mittwoch, 23. März 2005 21:56
An: Struts Users Mailing List
Betreff: Re: EL Mystery
On Wed, 23 Mar 2005 19:38:39 +
Users Mailing List
Betreff: Re: EL Mystery
On Wed, 23 Mar 2005 19:38:39 +,
[EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
Can some one shed some light on this mystery? Also I have
heard that using EL outside of tags can be a security problem
and that it is better
Or try escaping the c:out..
e.g
c:out value=${login.name} escapeXml=true/
true of false depending
hope that helps...
On Wed, 23 Mar 2005 15:56:02 -0500, Jeff Beal [EMAIL PROTECTED] wrote:
On Wed, 23 Mar 2005 19:38:39 +, [EMAIL PROTECTED]
[EMAIL PROTECTED] wrote:
Can some
hmm, having said that, it might be weird if the default behaviour was
to filter.
eg comparing
"${company.name} is cool"
and
c:set var="companyName""${company.name} is cool"/c:set
${companyName}
would have the second one filtered twice.
It might be possible to only filter when not inside
9 matches
Mail list logo
