tomcat-taglibs-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Karr, David" <>
Subject RE: Escaping quotes in form fields - c:out doesn't see my variable
Date Tue, 04 Feb 2003 15:55:53 GMT
First of all, it would help if you made it clear exactly what your first
problem is.  Whenever the most detailed statement of what went wrong is
"it does not work", then you haven't given enough information.

I'm going to guess that you see nothing from your "c:out".  This is
because you've created a scriptlet variable named "book", but you
haven't put it in a form that the JSTL can use.  The JSTL only uses
"scoped variables", being attributes placed into the page, request,
session, or application scopes (actually just hashtables associated with
each scope).  In this case, you probably just want to put it in the page
context, using the "page" implicit object (PageContext class).

Your second problem is not using the "escapeXml" attribute of "c:out".
Set it to "true" to avoid escaping the xml-sensitive characters.

You should read the JSTL specification for detailed information about

-----Original Message-----
From: Stephen Riek [] 
Sent: Monday, February 03, 2003 9:52 PM
Subject: Escaping quotes in form fields - c:out doesn't see my variable

Sorry for such an easy question but I must be misunderstanding
the fundamental usage of the JSTL. 

How do I get JSTL to output a string which has been formatted
to escape special characters, so that it is safe to put in a form 
field ? I have tried the following but it does not work-

<input name="title" value="<c:out value="${book.getTitle()}"/>">

where 'book' is an instance of a Javabean which I have created
within a JSP scriptlet like this,

Book book = new Book(request.getParameter("BookId"));

As you can see, I do NOT use JSTL's database tags for 
querying databases since I have already wrapped all that 
functionality and business logic inside my Javabeans (in
this case, the "Book" class).  However, it seems that the
JSTL <c:out> tag is unable to see my variable 'book' if I
instantiate it in this way, am I correct ? 

I only want to use the <c:out> tag in order to escape any
characters (such as ", ', &, \, >) which may upset my 
input tag. Is this overkill or should I use a simple search/replace
instead ? I hope the solution will work with double-byte
characters too. 

Thank you for bearing with me,



With Yahoo! Mail you can get a bigger mailbox -- choose a size that fits
your needs

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message