We wrote a custom taglib function called escapeJS to handle this from our JSPs 
and to keep JSP-specific code from polluting our model classes.

 

var companyName = '${vt:escapeJS(actionBean.company.name)}';

 

It just wraps a call to StringEscapeUtils.escapeEcmaScript().

 

-James

 

From: William Krick <kr...@3feetunder.com>
Reply-To: Stripes Users List <stripes-users@lists.sourceforge.net>
Date: Tuesday, June 28, 2016 at 11:05 AM
To: Stripes Users List <stripes-users@lists.sourceforge.net>
Subject: [Stripes-users] stripes tag for escaped string literal in JavaScript

 

I've run into an interesting situation with un-escaped double quotes in 
JavaScript in a JSP.

 

 

I have some JavaScript code like this...

 

 

var companyName = "${actionBean.company.name}";

 

 

...which breaks if the company name contains double quotes.

 

The same situation can happen if the company name contains a single quote and 
the javascript code quotes using single quotes...

 

var companyName = '${actionBean.company.name}';

 

 

The only workaround I've been able to come up with involves adding new methods 
to the company object that I can call to get a JavaScript escaped version of 
the string using Apache commons StringEscapeUtils.escapeJavaScript().

 

 

 

 

 

 

 

------------------------------------------------------------------------------ 
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San 
Francisco, CA to explore cutting-edge tech and listen to tech luminaries 
present their vision of the future. This family event has something for 
everyone, including kids. Get more information and register today. 
http://sdm.link/attshape_______________________________________________ 
Stripes-users mailing list Stripes-users@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/stripes-users 

------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users

Reply via email to