struts-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Greg Huber <gregh3...@gmail.com>
Subject Re: Referencing request parameters in struts tags.
Date Wed, 02 Nov 2016 08:12:54 GMT
Looking at this:

<s:if test="#parameters.contains('error')">
  <ul><li>
    <s:text name="#parameters.get('error').value"/>
  </li></ul>
</s:if>

and if I use :

login.action?error=<script type="text/javascript">alert("ok1");</script>

I get a js alert box popup.

Should it be able to popup the alert box?  Thought this kind of script
should be escaped.



On 2 November 2016 at 07:22, Lukasz Lenart <lukaszlenart@apache.org> wrote:

> 2016-11-01 14:39 GMT+01:00 McAleer, Richard (INT) <
> Richard.McAleer@teledyne.com>:
>
> > Hi,
> >
> > I’ve written a question on stackoverflow but thought I might get a better
> > response on the mailing list:
> >
> >
> >
> > http://stackoverflow.com/questions/40360998/struts-
> > parameters-not-accessible-in-sif-tag
> >
> >
> >
> > The problem I’m running into sounds very similar to
> > https://issues.apache.org/jira/browse/WW-2120 but I don’t think it’s the
> > same issue based on what I found tracing through the code.
> >
> >
>
> I posted a comment but it would be better to register a bug in JIRA.
>
>
> Thanks & regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message