Return-Path: Delivered-To: apmail-myfaces-dev-archive@www.apache.org Received: (qmail 710 invoked from network); 20 Aug 2008 16:00:07 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 20 Aug 2008 16:00:07 -0000 Received: (qmail 89971 invoked by uid 500); 20 Aug 2008 16:00:04 -0000 Delivered-To: apmail-myfaces-dev-archive@myfaces.apache.org Received: (qmail 89930 invoked by uid 500); 20 Aug 2008 16:00:04 -0000 Mailing-List: contact dev-help@myfaces.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "MyFaces Development" Delivered-To: mailing list dev@myfaces.apache.org Received: (qmail 89919 invoked by uid 99); 20 Aug 2008 16:00:04 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 20 Aug 2008 09:00:04 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of mwessendorf@gmail.com designates 64.233.182.187 as permitted sender) Received: from [64.233.182.187] (HELO nf-out-0910.google.com) (64.233.182.187) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 20 Aug 2008 15:59:05 +0000 Received: by nf-out-0910.google.com with SMTP id c7so259827nfi.26 for ; Wed, 20 Aug 2008 08:59:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:sender :to:subject:mime-version:content-type:content-transfer-encoding :content-disposition:x-google-sender-auth; bh=cVAgcKGJydpJUhCwBa8EilHTPdGmsEnvsdgi/6GlhtY=; b=lHvgr3RHwjl+QkGfLw3/P/hbnTnktCAG4QU0D8ZjkzAvOsQZ+oGi2+VuZakBOp0Uxt X/BJaudQISEsQV0nj8u1lIe1QKW4VKv8NtDOfeOl/7L6sD+iDXQUJdk9Gy4ZVmaSxGU4 UwayMwml2v/SAB8gonbMOkbQNVBKURKp1JATg= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:mime-version:content-type :content-transfer-encoding:content-disposition:x-google-sender-auth; b=E+KoL82PrzCvTt6kE9u54ryy2+6po3chlkYCG5xKjyW22QYIUZTqW6g16rcgh5U1UW NCpwIuZe7EQGYfNiSVGTNQyUm49aJI6PvbUAF1kH6tymFPOXq7DNn67Hq9mZH2Zi9ycI rm7bub1YhS2a0vxpERjCXvLZfOivQG+Mu6cS4= Received: by 10.210.82.7 with SMTP id f7mr293591ebb.140.1219247973185; Wed, 20 Aug 2008 08:59:33 -0700 (PDT) Received: by 10.210.27.9 with HTTP; Wed, 20 Aug 2008 08:59:33 -0700 (PDT) Message-ID: <71235db40808200859v3cdf37d8s2927c209d80117c8@mail.gmail.com> Date: Wed, 20 Aug 2008 17:59:33 +0200 From: "Matthias Wessendorf" Sender: mwessendorf@gmail.com To: "MyFaces Development" Subject: util to escape JavaScript ? MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Google-Sender-Auth: 622fa6124fe0a097 X-Virus-Checked: Checked by ClamAV on apache.org Hi, do we have a util (in one of our many subprojects) to escape strings, that may be send down to the client as JavaScript? I am thinking about "funny" side effects, that come up, when a user provides something like "isn't" instead of "isn\'t". Thanks, Matthias -- Matthias Wessendorf Need JSF and Web 2.0? http://code.google.com/p/facesgoodies further stuff: blog: http://matthiaswessendorf.wordpress.com/ sessions: http://www.slideshare.net/mwessendorf mail: matzew-at-apache-dot-org