RE: [displaytag-devel] Should be escaping html?

Fri, 12 Dec 2003 08:40:05 -0800

I have mixed feelings about this one. I agree that if it's used alot, then 
we should make it as easy as possible, but at the same time, it's one more 
piece of logic that I don't think we should be supporting. Especially 
since it's already part of the JSTL spec.

I suppose it also depends on how many times a single user would have to 
write those extra 2 lines of JSP. Personally, I don't mind writing the 
extra couple of lines, because I have full control over them, although in 
a larger app, where you may need to do this on many pages, it saves you 
many lines of JSP and probably a few headaches as well.

What does everyone else think about this?


On Fri, 12 Dec 2003, Paul McCulloch wrote:

> The reason I was considering it was so I could just use:
> 
> <display:column property="someUserEnteredData" escapeXML="true"/>
> 
> rather than
> 
> <display:column>
>       <c:out value="{row.someUserEnteredData}" escapeXML="true"/>
> </display:column>
> 
> It's a convinience thing - if there is a reasonable argument for not doing
> it then I'll leave it. It just seems to me that the taglib is all about
> convinience for the users.
> 
> Paul
> 
> > -----Original Message-----
> > From: John York [mailto:[EMAIL PROTECTED]
> > Sent: 12 December 2003 15:17
> > To: [EMAIL PROTECTED]
> > Subject: Re: [displaytag-devel] Should <table> be escaping html?
> > 
> > 
> > It should definitely do it in terms of link creation. For 
> > displaying of a 
> > users' data it might be nice. As an example, it might be nice 
> > to allow the 
> > display of HTML markup if someone wants to do it, but this should be 
> > available with either JSTL or the jakarta string taglib, so 
> > is there any 
> > reason to add in custom support for it?
> > 
> > 
> > 
> > 
> > On Fri, 12 Dec 2003, Paul McCulloch wrote:
> > 
> > > Should the table/column tag be responsible for escaping 
> > special characters
> > > in the data being displayed? 
> > > 
> > > I realize that it doesn't need to but it would certainly be 
> > convinient. What
> > > do people reckon? I'll go ahead and implement it if it's 
> > got a chance of
> > > making it into the main code stream.
> > > 
> > > cheers,
> > > 
> > > Paul
> > > 
> > > 
> > > **************************************
> > > Axios Email Confidentiality Footer
> > > Privileged/Confidential Information may be contained in 
> > this message. If you are not the addressee indicated in this 
> > message (or responsible for delivery of the message to such 
> > person), you may not copy or deliver this message to anyone. 
> > In such case, you should destroy this message, and notify us 
> > immediately. If you or your employer does not consent to 
> > Internet email messages of this kind, please advise us 
> > immediately. Opinions, conclusions and other information 
> > expressed in this message are not given or endorsed by my 
> > Company or employer unless otherwise indicated by an 
> > authorised representative independent of this message.
> > > WARNING:
> > > While Axios Systems Ltd takes steps to prevent computer 
> > viruses from being transmitted via electronic mail 
> > attachments we cannot guarantee that attachments do not 
> > contain computer virus code.  You are therefore strongly 
> > advised to undertake anti virus checks prior to accessing the 
> > attachment to this electronic mail.  Axios Systems Ltd grants 
> > no warranties regarding performance use or quality of any 
> > attachment and undertakes no liability for loss or damage 
> > howsoever caused.
> > > 
> > > 
> > > 
> > > -------------------------------------------------------
> > > This SF.net email is sponsored by: IBM Linux Tutorials.
> > > Become an expert in LINUX or just sharpen your skills.  
> > Sign up for IBM's
> > > Free Linux Tutorials.  Learn everything from the bash shell 
> > to sys admin.
> > > Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> > > _______________________________________________
> > > displaytag-devel mailing list
> > > [EMAIL PROTECTED]
> > > https://lists.sourceforge.net/lists/listinfo/displaytag-devel
> > > 
> > 
> > -- 
> > John York
> > Software Engineer
> > CareerSite Corporation
> > 
> > 
> > 
> > -------------------------------------------------------
> > This SF.net email is sponsored by: IBM Linux Tutorials.
> > Become an expert in LINUX or just sharpen your skills.  Sign 
> > up for IBM's
> > Free Linux Tutorials.  Learn everything from the bash shell 
> > to sys admin.
> > Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> > _______________________________________________
> > displaytag-devel mailing list
> > [EMAIL PROTECTED]
> > https://lists.sourceforge.net/lists/listinfo/displaytag-devel
> > 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
> Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> _______________________________________________
> displaytag-devel mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/displaytag-devel
> 

-- 
John York
Software Engineer
CareerSite Corporation



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
displaytag-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/displaytag-devel

Reply via email to