Hi Scott,
Thanks for the tip. I disabled htmlEscaping for the messages.

Cheers,
Mohanjith

On Fri, Feb 22, 2008 at 2:44 AM, Scott Battaglia
<[EMAIL PROTECTED]> wrote:
> It looks like HTML escaping now defaults to true for the Form tags in Spring
> 2.5.  Not sure if that's the case for all tags.  You can disable it if you
> need to, I would guess.
>
> And the reason the other stuff works is because the HTML is not part of the
> "user-provided" input (I'm guessing).  Its part of the hard-coded message.
>
> -Scott
>
>
>
> On Thu, Feb 21, 2008 at 4:03 PM, Sudirikku Mohanjith <[EMAIL PROTECTED]>
> wrote:
> >
> >
> >
> > Hi,
> > I used to use external links in error.authentication.credentials.bad
> > in CAS Server 3.1.2, but with the release of 3.2 the same messages
> > started showing the html (anchors) in plain text. Did you introduce
> > html escaping.
> > e.g.
> > error.authentication.credentials.bad=The credentials you provided
> > cannot be determined to be authentic. If you forgot your password,
> > request for a <a href="http://[hostname]/user/password";>new
> > password</a>. If you haven't registered, please <a
> > href="http://[hostname]/user/register";>register</a>.
> >
> > What might be causing this? The weirdest of all is that in meassges
> > like bellow, the link works.
> >
> > screen.logout.redirect=The service from which you arrived has supplied
> > a <a href="{0}">link you may follow by clicking here</a>.
> >
> > Cheers,
> > Mohanjith
> > _______________________________________________
> > Yale CAS mailing list
> > [email protected]
> > http://tp.its.yale.edu/mailman/listinfo/cas
> >
>
>
>
> --
> -Scott Battaglia
> PGP Public Key Id: 0x383733AA
> LinkedIn: http://www.linkedin.com/in/scottbattaglia
> _______________________________________________
>  Yale CAS mailing list
>  [email protected]
>  http://tp.its.yale.edu/mailman/listinfo/cas
>
>
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to