Taavi Tiirik wrote:

> I think property tag could use some extra functionality that would make
> putting information into action views a lot easier.
> 
> Problem with using property tag is obvious. It does not do any escaping
> of special characters. I think it should.
> 
> For example:
> Following text input field works as expected only, if property 'asd' does
> not contain any double quote characters.
> 
> <input type="text" name="asd" value="<webwork:property value="asd"/>"/>
> 
> If 'asd' does contain double quotes then they must be replaced with &#34;
> 
> Would it make sense to add additional attribute(s) to the property tag that
> control what should be escaped and how?
> 
> And different view technologies do require different escaping.
> 
> Please share your thoughts about this. How do you deal with this?

This is a very good question, that I haven't deal with myself (but need to).

Are there any occasions where it is *not* necessary to escape the 
output? I.e. should we always do it?

/Rickard

-- 
Rickard �berg
Author of "Mastering RMI"
Chief Architect, TheServerSide.com
   The Middleware Company - We Build Experts!


_______________________________________________
Webwork-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/webwork-user

Reply via email to