Revision: 409
          http://svn.sourceforge.net/stripes/?rev=409&view=rev
Author:   tfenne
Date:     2006-09-03 12:30:44 -0700 (Sun, 03 Sep 2006)

Log Message:
-----------
Fix for STS-251: options do not HTML encode their labels

Modified Paths:
--------------
    branches/1.4.x/stripes/src/net/sourceforge/stripes/tag/InputOptionTag.java

Modified: 
branches/1.4.x/stripes/src/net/sourceforge/stripes/tag/InputOptionTag.java
===================================================================
--- branches/1.4.x/stripes/src/net/sourceforge/stripes/tag/InputOptionTag.java  
2006-09-03 19:24:09 UTC (rev 408)
+++ branches/1.4.x/stripes/src/net/sourceforge/stripes/tag/InputOptionTag.java  
2006-09-03 19:30:44 UTC (rev 409)
@@ -15,6 +15,7 @@
 package net.sourceforge.stripes.tag;
 
 import net.sourceforge.stripes.exception.StripesJspException;
+import net.sourceforge.stripes.util.HtmlUtil;
 
 import javax.servlet.jsp.JspException;
 import javax.servlet.jsp.tagext.BodyTag;
@@ -127,7 +128,7 @@
         try {
             writeOpenTag(getPageContext().getOut(), "option");
             if (actualLabel != null) {
-                getPageContext().getOut().write(actualLabel);
+                getPageContext().getOut().write( HtmlUtil.encode(actualLabel) 
);
             }
             writeCloseTag(getPageContext().getOut(), "option");
 


This was sent by the SourceForge.net collaborative development platform, the 
world's largest Open Source development site.

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Stripes-development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-development

Reply via email to