Re: Any objections to adding Ant get's to build.xml?

2004-12-19 Thread Phil Steitz
Martin Cooper wrote: On Sun, 19 Dec 2004 12:38:27 -0800, Craig McClanahan <[EMAIL PROTECTED]> wrote: On Sun, 19 Dec 2004 00:55:56 -0600, Eddie Bush <[EMAIL PROTECTED]> wrote: At worst case, it seems we could add a task to do the downloads of those binaries that are redistrutable. I think most folk

Re: Any objections to adding Ant get's to build.xml?

2004-12-19 Thread Martin Cooper
On Sun, 19 Dec 2004 19:06:56 -0800, Craig McClanahan <[EMAIL PROTECTED]> wrote: > Intermixed. > > On Sun, 19 Dec 2004 18:36:41 -0800, Martin Cooper <[EMAIL PROTECTED]> wrote: > > On Sun, 19 Dec 2004 13:13:03 -0800, Craig McClanahan <[EMAIL PROTECTED]> > > wrote: > > > On Sun, 19 Dec 2004 12:54:38

Re: Any objections to adding Ant get's to build.xml?

2004-12-19 Thread Craig McClanahan
Intermixed. On Sun, 19 Dec 2004 18:36:41 -0800, Martin Cooper <[EMAIL PROTECTED]> wrote: > On Sun, 19 Dec 2004 13:13:03 -0800, Craig McClanahan <[EMAIL PROTECTED]> > wrote: > > On Sun, 19 Dec 2004 12:54:38 -0800, Martin Cooper <[EMAIL PROTECTED]> wrote: > > > On Sun, 19 Dec 2004 12:38:27 -0800, C

Re: Any objections to adding Ant get's to build.xml?

2004-12-19 Thread Martin Cooper
On Sun, 19 Dec 2004 13:13:03 -0800, Craig McClanahan <[EMAIL PROTECTED]> wrote: > On Sun, 19 Dec 2004 12:54:38 -0800, Martin Cooper <[EMAIL PROTECTED]> wrote: > > On Sun, 19 Dec 2004 12:38:27 -0800, Craig McClanahan <[EMAIL PROTECTED]> > > wrote: > > > On Sun, 19 Dec 2004 00:55:56 -0600, Eddie Bus

Re: Escape html

2004-12-19 Thread Craig McClanahan
On Sun, 19 Dec 2004 19:24:23 -0300, Edgar Poce <[EMAIL PROTECTED]> wrote: > > Are there any other characters that should be filtered for security > > reasons? > > I think there are not. I thought it was a html escape tool and I > expected it replaced 'à' with "à" for example. But I see it's not

Re: Escape html

2004-12-19 Thread Edgar Poce
> Are there any other characters that should be filtered for security > reasons? I think there are not. I thought it was a html escape tool and I expected it replaced 'à' with "à" for example. But I see it's not the purpose. Has it any sense to add an "escape" attribute with values "html", "jav

svn commit: r122792 - /struts/sandbox/trunk/struts-shale/build.xml

2004-12-19 Thread craigmcc
Author: craigmcc Date: Sun Dec 19 14:15:00 2004 New Revision: 122792 URL: http://svn.apache.org/viewcvs?view=rev&rev=122792 Log: Commons Chain jar file now has a version number in it. Modified: struts/sandbox/trunk/struts-shale/build.xml Modified: struts/sandbox/trunk/struts-shale/build.xml U

Re: Escape html

2004-12-19 Thread Craig McClanahan
The purpose for filtering these four characters is to avoid cross site scripting attacks that would otherwise be possible if an application accepted an input text field that had something like a

Escape html

2004-12-19 Thread Edgar Poce
Hi TagUtils.filter(String value) only filters 4 html sensitive characters while there are many more. Is there any special reason or it's a bug? Regards Edgar - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-

Re: Any objections to adding Ant get's to build.xml?

2004-12-19 Thread Craig McClanahan
On Sun, 19 Dec 2004 12:54:38 -0800, Martin Cooper <[EMAIL PROTECTED]> wrote: > On Sun, 19 Dec 2004 12:38:27 -0800, Craig McClanahan <[EMAIL PROTECTED]> > wrote: > > On Sun, 19 Dec 2004 00:55:56 -0600, Eddie Bush <[EMAIL PROTECTED]> wrote: > > > At worst case, it seems we could add a task to do the

Re: Any objections to adding Ant get's to build.xml?

2004-12-19 Thread Martin Cooper
On Sun, 19 Dec 2004 12:38:27 -0800, Craig McClanahan <[EMAIL PROTECTED]> wrote: > On Sun, 19 Dec 2004 00:55:56 -0600, Eddie Bush <[EMAIL PROTECTED]> wrote: > > At worst case, it seems we could add a task to do the downloads of > > those binaries that are redistrutable. I think most folks would > >

Re: Any objections to adding Ant get's to build.xml?

2004-12-19 Thread Craig McClanahan
On Sun, 19 Dec 2004 00:55:56 -0600, Eddie Bush <[EMAIL PROTECTED]> wrote: > At worst case, it seems we could add a task to do the downloads of > those binaries that are redistrutable. I think most folks would > rather invoke an Ant task than have to chase down dependencies. It > wouldn't even hav