Hi list,
blob content also needs html escaping and it's what this patch is for :)
regards, Dziugas Baltrunas
Index: DbBlobContentTag.java =================================================================== RCS file: /cvsroot/jdbforms/dbforms/src/org/dbforms/taglib/DbBlobContentTag.java,v retrieving revision 1.17 diff -u -r1.17 DbBlobContentTag.java --- DbBlobContentTag.java 5 Aug 2004 14:21:15 -0000 1.17 +++ DbBlobContentTag.java 9 Aug 2004 14:41:30 -0000 @@ -123,7 +123,7 @@ sqle.printStackTrace(); } - pageContext.getOut().write(contentBuf.toString()); + pageContext.getOut().write(escapeHtml(contentBuf.toString())); } catch (java.io.IOException ioe) { throw new JspException("IO Error: " + ioe.getMessage()); }