That's a good point. I'll go along with that. +1 for escapeXML attribute
On Fri, 12 Dec 2003, Paul McCulloch wrote: > The application I am developing will possibly be modified (at least the JSP > side of things) by customers after delivery. A single <column> is going to > be easier for others to modify. > > I've just had another look at <c:out> - it's default behaviour is to escape > the xml. Isn't that something that every tag which renders attributes as > html/xml should do? > > I'm starting to convince myself that <table> & <column> should do the > escaping. > > Paul > > > -----Original Message----- > > From: John York [mailto:[EMAIL PROTECTED] > > Sent: 12 December 2003 15:35 > > To: [EMAIL PROTECTED] > > Subject: RE: [displaytag-devel] Should <table> be escaping html? > > > > > > I have mixed feelings about this one. I agree that if it's > > used alot, then > > we should make it as easy as possible, but at the same time, > > it's one more > > piece of logic that I don't think we should be supporting. Especially > > since it's already part of the JSTL spec. > > > > I suppose it also depends on how many times a single user > > would have to > > write those extra 2 lines of JSP. Personally, I don't mind > > writing the > > extra couple of lines, because I have full control over them, > > although in > > a larger app, where you may need to do this on many pages, it > > saves you > > many lines of JSP and probably a few headaches as well. > > > > What does everyone else think about this? > > > > > > On Fri, 12 Dec 2003, Paul McCulloch wrote: > > > > > The reason I was considering it was so I could just use: > > > > > > <display:column property="someUserEnteredData" escapeXML="true"/> > > > > > > rather than > > > > > > <display:column> > > > <c:out value="{row.someUserEnteredData}" escapeXML="true"/> > > > </display:column> > > > > > > It's a convinience thing - if there is a reasonable > > argument for not doing > > > it then I'll leave it. It just seems to me that the taglib > > is all about > > > convinience for the users. > > > > > > Paul > > > > > > > -----Original Message----- > > > > From: John York [mailto:[EMAIL PROTECTED] > > > > Sent: 12 December 2003 15:17 > > > > To: [EMAIL PROTECTED] > > > > Subject: Re: [displaytag-devel] Should <table> be escaping html? > > > > > > > > > > > > It should definitely do it in terms of link creation. For > > > > displaying of a > > > > users' data it might be nice. As an example, it might be nice > > > > to allow the > > > > display of HTML markup if someone wants to do it, but > > this should be > > > > available with either JSTL or the jakarta string taglib, so > > > > is there any > > > > reason to add in custom support for it? > > > > > > > > > > > > > > > > > > > > On Fri, 12 Dec 2003, Paul McCulloch wrote: > > > > > > > > > Should the table/column tag be responsible for escaping > > > > special characters > > > > > in the data being displayed? > > > > > > > > > > I realize that it doesn't need to but it would certainly be > > > > convinient. What > > > > > do people reckon? I'll go ahead and implement it if it's > > > > got a chance of > > > > > making it into the main code stream. > > > > > > > > > > cheers, > > > > > > > > > > Paul > > > > > > > > > > > > > > > ************************************** > > > > > Axios Email Confidentiality Footer > > > > > Privileged/Confidential Information may be contained in > > > > this message. If you are not the addressee indicated in this > > > > message (or responsible for delivery of the message to such > > > > person), you may not copy or deliver this message to anyone. > > > > In such case, you should destroy this message, and notify us > > > > immediately. If you or your employer does not consent to > > > > Internet email messages of this kind, please advise us > > > > immediately. Opinions, conclusions and other information > > > > expressed in this message are not given or endorsed by my > > > > Company or employer unless otherwise indicated by an > > > > authorised representative independent of this message. > > > > > WARNING: > > > > > While Axios Systems Ltd takes steps to prevent computer > > > > viruses from being transmitted via electronic mail > > > > attachments we cannot guarantee that attachments do not > > > > contain computer virus code. You are therefore strongly > > > > advised to undertake anti virus checks prior to accessing the > > > > attachment to this electronic mail. Axios Systems Ltd grants > > > > no warranties regarding performance use or quality of any > > > > attachment and undertakes no liability for loss or damage > > > > howsoever caused. > > > > > > > > > > > > > > > > > > > > ------------------------------------------------------- > > > > > This SF.net email is sponsored by: IBM Linux Tutorials. > > > > > Become an expert in LINUX or just sharpen your skills. > > > > Sign up for IBM's > > > > > Free Linux Tutorials. Learn everything from the bash shell > > > > to sys admin. > > > > > Click now! > http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click > > > > _______________________________________________ > > > > displaytag-devel mailing list > > > > [EMAIL PROTECTED] > > > > https://lists.sourceforge.net/lists/listinfo/displaytag-devel > > > > > > > > > > -- > > > John York > > > Software Engineer > > > CareerSite Corporation > > > > > > > > > > > > ------------------------------------------------------- > > > This SF.net email is sponsored by: IBM Linux Tutorials. > > > Become an expert in LINUX or just sharpen your skills. Sign > > > up for IBM's > > > Free Linux Tutorials. Learn everything from the bash shell > > > to sys admin. > > > Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click > > > _______________________________________________ > > > displaytag-devel mailing list > > > [EMAIL PROTECTED] > > > https://lists.sourceforge.net/lists/listinfo/displaytag-devel > > > > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: IBM Linux Tutorials. > > Become an expert in LINUX or just sharpen your skills. Sign up for IBM's > > Free Linux Tutorials. Learn everything from the bash shell to sys admin. > > Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click > > _______________________________________________ > > displaytag-devel mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/displaytag-devel > > > > -- John York Software Engineer CareerSite Corporation ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ displaytag-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/displaytag-devel
