Mailing-List: contact dev-help@struts.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Struts Developers List" <dev@struts.apache.org>
MIME-Version: 1.0
In-Reply-To: <CAMopvkNi+DVHMoWDWu69_Ow=swVcgVUceG6M-u_cS5pvhCz=vQ@mail.gmail.com>
References: <1909aee2-e71c-c205-5608-8369917a0c9d@apache.org>
 <CAJi=3dWA7b9BoSeJPJBR4bdG+o8Z5Wx0gLpG58wcCDzr+nQuhg@mail.gmail.com>
 <CAMopvkMB58cN=t9zGkT910Q8fa0YunnkSZgG1fr_1tqzWRxwEQ@mail.gmail.com>
 <CAJi=3dU_Ru9FHCvDF4gBQ0y4fBdLoU3864BKpvU9n-TNUDqOeA@mail.gmail.com> <CAMopvkNi+DVHMoWDWu69_Ow=swVcgVUceG6M-u_cS5pvhCz=vQ@mail.gmail.com>
From: Greg Huber <gregh3269@gmail.com>
Date: Wed, 16 Nov 2016 11:12:33 +0000
Message-ID: <CAJi=3dXCfxdCd55kvjVMku9SyNi6PSnaJxHe9B2yaYrV5t7vLQ@mail.gmail.com>
Subject: Re: Referencing request parameters in struts tags.
To: Struts Developers List <dev@struts.apache.org>
Content-Type: multipart/alternative; boundary=001a113f16d65256780541692636
archived-at: Wed, 16 Nov 2016 11:12:40 -0000

--001a113f16d65256780541692636
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Yep it works.  It matches the <property> escaping default also. I will do
some more testing also.

@override
public String toString() {
           return StringEscapeUtils.escapeHtml4(getValue());
}

On 16 November 2016 at 10:58, Lukasz Lenart <lukaszlenart@apache.org> wrote=
:

> 2016-11-16 11:53 GMT+01:00 Greg Huber <gregh3269@gmail.com>:
> > Sounds like a good idea and plug the whole lot in one go.
> >
> > tomcat 8 is JSP 2.3 and EL 3.0.
> >
> >
> > ######
> >
> > checking ${parameters.get('error')}
> >
> > uses org.apache.struts2.dispatcher.Parameter.  If I debug the class it
> is.
> > toStringArray() does the conversion to the string, maybe escape here?
> >
> > strValues[i] =3D StringEscapeUtils.escapeHtml4(String.valueOf(v));
>
> I think it's because of toString() implementation but this should be
> ok to escape in toString(), let me check that.
>
>
> Regards
> --
> =C5=81ukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
> For additional commands, e-mail: dev-help@struts.apache.org
>
>

--001a113f16d65256780541692636--