Hi list,

blob content also needs html escaping and it's what this patch is for :)

regards,
Dziugas Baltrunas
Index: DbBlobContentTag.java
===================================================================
RCS file: /cvsroot/jdbforms/dbforms/src/org/dbforms/taglib/DbBlobContentTag.java,v
retrieving revision 1.17
diff -u -r1.17 DbBlobContentTag.java
--- DbBlobContentTag.java       5 Aug 2004 14:21:15 -0000       1.17
+++ DbBlobContentTag.java       9 Aug 2004 14:41:30 -0000
@@ -123,7 +123,7 @@
                                sqle.printStackTrace();
                        }
 
-                       pageContext.getOut().write(contentBuf.toString());
+                       pageContext.getOut().write(escapeHtml(contentBuf.toString()));
                } catch (java.io.IOException ioe) {
                        throw new JspException("IO Error: " + ioe.getMessage());
                }

Reply via email to