struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Niall Pemberton" <niall.pember...@gmail.com>
Subject Re: Filter problem
Date Thu, 07 Dec 2006 08:24:29 GMT
On 12/5/06, George.Dinwiddie@wellsfargo.com
<George.Dinwiddie@wellsfargo.com> wrote:
> How are you inserting your XML/HTML into the JSP?
>
> I don't think the filter method is causing your problem.  I think you're
> not expressing that the output should not be filtered.  If you're using
> <c:out> you might want to add 'escapeXml="false"', for example.

or if you're using the Struts <bean:write> tag there is a "filter"
attribute - so you can do  <bean:write filter="false">  (true is
default)

Niall


> > -----Original Message-----
> > From: Hehl, Thomas [mailto:Thomas.Hehl@acs-inc.com]
> > Sent: Tuesday, December 05, 2006 12:08 PM
> > To: 'Struts Users Mailing List'
> > Subject: RE: Filter problem
> >
> >
> > Nope. This is a struts 2 thing and I'm on 1.2.x.
> >
> > -----Original Message-----
> > From: Martin Gainty [mailto:mgainty@hotmail.com]
> > Sent: Tuesday, December 05, 2006 11:21 AM
> > To: Struts Users Mailing List
> > Subject: Re: Filter problem
> >
> >
> > Hi Thomas-
> > Perhaps an implementation where you register your own
> > <pre-result> listener (example located at)
> > http://struts.apache.org/2.x/docs/can-we-access-an-actions-result.html
> >
> > Anyone else?
> > M-
> > This e-mail communication and any attachments may contain
> > confidential and privileged information for the use of the
> > designated recipients named above. If you are not the
> > intended recipient, you are hereby notified that you have
> > received this communication in error and that any review,
> > disclosure, dissemination, distribution or copying of it or its
> > contents
> > ----- Original Message -----
> > From: "Hehl, Thomas" <Thomas.Hehl@acs-inc.com>
> > To: <user@struts.apache.org>
> > Sent: Tuesday, December 05, 2006 10:05 AM
> > Subject: Filter problem
> >
> >
> > > OK, I've collided with struts over an issue and would like
> > to know if
> > people
> > > have suggestions on how to solve.
> > >
> > > I am reading stuff from an XML file and building parts of
> > my UI from
> > > for
> > use
> > > in a JSP. I thought it would be good for some of them to have HTML
> > > markup
> > in
> > > them, so I put &lt;, etc in the html file. It goes all the way to
> > > struts
> > as
> > > "<" and then struts converts it at the last second so that
> > what gets
> > > displayed is <B>.:(
> > >
> > > So how do I stop struts from doing this? So far, I dunno.
> > Here's the
> > > code that causes the problem in ResourceUtils(1.3.5):
> > >
> > >
> > >    /**
> > >     * Filter the specified string for characters that are
> > senstive to HTML
> > >     * interpreters, returning the string with these
> > characters replaced by
> > >     * the corresponding character entities.
> > >     *
> > >     * @param value The string to be filtered and returned
> > >     */
> > >    public static String filter(String value) {
> > >        if ((value == null) || (value.length() == 0)) {
> > >            return value;
> > >        }
> > >
> > >        StringBuffer result = null;
> > >        String filtered = null;
> > >
> > >        for (int i = 0; i < value.length(); i++) {
> > >            filtered = null;
> > >
> > >            switch (value.charAt(i)) {
> > >            case '<':
> > >                filtered = "&lt;";
> > >
> > >                break;
> > >
> > >            case '>':
> > >                filtered = "&gt;";
> > >
> > >                break;
> > >
> > >            case '&':
> > >                filtered = "&amp;";
> > >
> > >                break;
> > >
> > >            case '"':
> > >                filtered = "&quot;";
> > >
> > >                break;
> > >
> > >            case '\'':
> > >                filtered = "&#39;";
> > >
> > >                break;
> > >            }
> > >
> > >            if (result == null) {
> > >                if (filtered != null) {
> > >                    result = new StringBuffer(value.length() + 50);
> > >
> > >                    if (i > 0) {
> > >                        result.append(value.substring(0, i));
> > >                    }
> > >
> > >                    result.append(filtered);
> > >                }
> > >            } else {
> > >                if (filtered == null) {
> > >                    result.append(value.charAt(i));
> > >                } else {
> > >                    result.append(filtered);
> > >                }
> > >            }
> > >        }
> > >
> > >        return (result == null) ? value : result.toString();
> > >    }
> > >
> > > I think it is uncharitable for struts to change these with
> > no option
> > > to prevent it. I am thinking about adding &open; and &close; and
> > > resolving
> > them
> > > here to turn them back into < and > respectively. Any other ideas,
> > comments,
> > > suggestions?
> > >
> > > Thanks.

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org


Mime
View raw message