Re: setEscapeModelStrings to false as default

2008-03-20 Thread Erik van Oosten
Create a new component as a subclass of the component in question (Label). In the constructor you call setEscape...(false). From then on, only use the new subclass. But before you do so, read the other responses :) Regards, Erik. Marco Aurélio Silva schreef: > Hi all > > Is there a way to s

Re: setEscapeModelStrings to false as default

2008-03-19 Thread Matej Knopp
I think the point here is not to call setEscapeModelString at all. Unless I'm missing something the call is completely redundant in this case and only results in invalid markup generated when user enters a xml entity. -Matej On Wed, Mar 19, 2008 at 9:48 PM, Per Newgro <[EMAIL PROTECTED]> wrote: >

Re: setEscapeModelStrings to false as default

2008-03-19 Thread Per Newgro
Hi Marco, do you have the ability to change the textfield creation to a factory? You could use a creator for EscapeIgnoringTextField, wich is a call to public static TextField createEscapeIgnoringTextField(String id, IModel model) { return new TextField(id, model).setEscapeModelStrings(false);

Re: setEscapeModelStrings to false as default

2008-03-19 Thread Matej Knopp
Yes. < should never make it into your model object. -Matej On Wed, Mar 19, 2008 at 7:26 PM, Marco Aurélio Silva <[EMAIL PROTECTED]> wrote: > What do you mean? If wicket escapes and unescapes it on database should be > saved ">" instead ">" ? > > > > On Wed, Mar 19, 2008 at 3:20 PM, Matej Knopp

Re: setEscapeModelStrings to false as default

2008-03-19 Thread Marco Aurélio Silva
What do you mean? If wicket escapes and unescapes it on database should be saved ">" instead ">" ? On Wed, Mar 19, 2008 at 3:20 PM, Matej Knopp <[EMAIL PROTECTED]> wrote: > What you are saying makes little sense. Wicket escapes and unescapes > the field value transparently, so your model object w

Re: setEscapeModelStrings to false as default

2008-03-19 Thread Matej Knopp
What you are saying makes little sense. Wicket escapes and unescapes the field value transparently, so your model object will never contain the > -Matej On Wed, Mar 19, 2008 at 6:57 PM, Marco Aurélio Silva <[EMAIL PROTECTED]> wrote: > Hi all > > Is there a way to set EscapeModelStrings to false

Re: setEscapeModelStrings to false as default

2008-03-19 Thread Marco Aurélio Silva
My site is a extranet, so, only users that have user/password/ssl certificate can acces it. But, what is your advice to solve this problem? Can you give me more details how to use visitChildren? On Wed, Mar 19, 2008 at 3:03 PM, Martijn Dashorst < [EMAIL PROTECTED]> wrote: > You are aware of the s

Re: setEscapeModelStrings to false as default

2008-03-19 Thread Martijn Dashorst
You are aware of the security implications such as javascript injection attacks? You can use a visitor to set it for your input fields. see visitChildren() Martijn On 3/19/08, Marco Aurélio Silva <[EMAIL PROTECTED]> wrote: > Hi all > > Is there a way to set EscapeModelStrings to false in a glob

Re: setEscapeModelStrings to false as default

2008-03-19 Thread Marco Aurélio Silva
By the way, I'm using wicket 1.2.6 On Wed, Mar 19, 2008 at 2:57 PM, Marco Aurélio Silva <[EMAIL PROTECTED]> wrote: > Hi all > > Is there a way to set EscapeModelStrings to false in a global way (to all > components)? I'm having problems with this. If the size of a column on > database is 20, and

setEscapeModelStrings to false as default

2008-03-19 Thread Marco Aurélio Silva
Hi all Is there a way to set EscapeModelStrings to false in a global way (to all components)? I'm having problems with this. If the size of a column on database is 20, and the user fill 20 characters on this field and one character is, for example, ">", wicket will convert it to '>' and when try