Re: XSS vulnerability in calendar component

. But the methods escape or escapeHTML do not work in this case. I am working on that bug. Do I have to recreate a new JIRA? Emmanuel -- View this message in context: http://tapestry.1045711.n5.nabble.com/XSS-vulnerability-in-calendar-component-tp2433878p3377170.html Sent from the Tapestry

XSS vulnerability in calendar component

Hello The calendar component provided in tapestry 5.1.0.5 could be used to allow code injection by malicious web users into any page that uses datefield . To reproduce the vulnerability, put js code like scriptalert(T5 is great); /script in any datefield and click on the related calendar bitma

Re: XSS vulnerability in calendar component

Please file an issue in JIRA; a patch is most welcome! 2010/3/17 françois facon fra.fa...@gmail.com: Hello The calendar component provided in tapestry 5.1.0.5 could be used to allow code injection by malicious web users into any page that uses datefield . To reproduce the vulnerability, put

Re: XSS vulnerability in calendar component

https://issues.apache.org/jira/browse/TAP5-1057

Re: T5:calendar component problem

at 4:34 PM, Natia Gdzelishvili [EMAIL PROTECTED] wrote: hi, I have a problem with tapestry calendar component, on page I have: input type=text t:type=datefield t:value=dateOfBirth / In firefox when i click calendar icon calendar is displayed but IE it doesn't Please

Re: T5:calendar component problem

a problem with tapestry calendar component, on page I have: input type=text t:type=datefield t:value=dateOfBirth / In firefox when i click calendar icon calendar is displayed but IE it doesn't Please help Thanks in advance -- View this message

Re: T5:calendar component problem

with dateField, how to change styles, I am trying to change date format but it doesn't changes, and again it doesn't work in Internet Explorer Thanks in advance On Thu, Apr 3, 2008 at 4:34 PM, Natia Gdzelishvili [EMAIL PROTECTED] wrote: hi, I have a problem with tapestry calendar component

Re: T5:calendar component problem

format but it doesn't changes, and again it doesn't work in Internet Explorer Thanks in advance On Thu, Apr 3, 2008 at 4:34 PM, Natia Gdzelishvili [EMAIL PROTECTED] wrote: hi, I have a problem with tapestry calendar component, on page I have: input type=text t:type=datefield t:value

Re: T5:calendar component problem

with tapestry calendar component, on page I have: input type=text t:type=datefield t:value=dateOfBirth / In firefox when i click calendar icon calendar is displayed but IE it doesn't Please help Thanks in advance

T5:calendar component problem

hi, I have a problem with tapestry calendar component, on page I have: input type=text t:type=datefield t:value=dateOfBirth / In firefox when i click calendar icon calendar is displayed but IE it doesn't Please help Thanks in advance

Re: Calendar component

There is a new book on tapestry published by sourcebeat called Tapestry 101. The project of the book is to build a calendar function and can download the source and try it our. Not sure this will meet your needs, but worth a look On 12/16/06, Simon Raveh [EMAIL PROTECTED] wrote: Hi, I

Re: Calendar component

The Yahoo Library has one, independent of any framework. I used it myself and wrote a wrapper around it to have only 2 lines of code in my HTML page. http://developer.yahoo.com/yui/calendar/ On 12/17/06, Ed Ross [EMAIL PROTECTED] wrote: There is a new book on tapestry published by sourcebeat

Calendar component

Hi, I need to integrate calendar functionality into my app to display events. Does anybody know where can I get such a component. Thanks, Simon