Looking at this:
<s:if test="#parameters.contains('error')">
<ul><li>
<s:text name="#parameters.get('error').value"/>
</li></ul>
</s:if>
and if I use :
login.action?error=<script type="text/javascript">alert("ok1");</script>
I get a js alert box popup.
Should it be able to popup the alert box? Thought this kind of script
should be escaped.
On 2 November 2016 at 07:22, Lukasz Lenart <[email protected]> wrote:
> 2016-11-01 14:39 GMT+01:00 McAleer, Richard (INT) <
> [email protected]>:
>
> > Hi,
> >
> > I’ve written a question on stackoverflow but thought I might get a better
> > response on the mailing list:
> >
> >
> >
> > http://stackoverflow.com/questions/40360998/struts-
> > parameters-not-accessible-in-sif-tag
> >
> >
> >
> > The problem I’m running into sounds very similar to
> > https://issues.apache.org/jira/browse/WW-2120 but I don’t think it’s the
> > same issue based on what I found tracing through the code.
> >
> >
>
> I posted a comment but it would be better to register a bug in JIRA.
>
>
> Thanks & regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
