Hello List,

Validation works great! However, we don't want to allow people to enter 

<form><input type=text value=trytohackaround><input type=submit></form>

Style data into our forms. I'm happy to just make < > illegal characters
using a regex mask, but the SAX parser won't parse my validation.xml file.
Does anyone know how to escape < > characters in the validation.xml file or
otherwise suggest a workaround to stop people from entering html style chars
in our forms.

<field roperty="user.firstName" depends="required,maxlength,mask">
<msg name="mask" key="registration.maskmsg"/>
<arg0 key="registration.user.firstName"/>
<arg1 key="${var:maxlength}" name="maxlength" resource="false"/>
        <var>
                <var-name>maxlength</var-name>
                <var-value>100</var-value>
        </var>
        <var>
                <var-name>mask</var-name>
                (I've tried all of the following)
                <var-value>^[^&lt;&gt;]*</var-value>
                <var-value>^[^<>]*</var-value>
                <var-value>^[^\<\>]*</var-value>
                etc...
        </var>
</field>


Thx - Eric


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to