On 10/29/07, Manuel Correa <[EMAIL PROTECTED]> wrote:
> So, I have to write a custom library for each method that I want access
> for the request??
>
> Manuel Correa.
>

No, you wouldn't have to write any tags, just change the rtexprvalue
attributes in the tld file for the tags you want to use JSP EL with.

With a 2.4 or greater server, if the rtexprvalue=true, the JSP EL gets
processed first, then passed into the tag library as already processed
text, so the Struts tags then apply any OGNL left over and the value
is written out in the HTML.

To prevent this as an avenue for hackers to attack the system, the
struts developers set all the rtexprvalue's to false, which means the
JSP EL processor sends the unprocessed text to the taglib, since the
Struts taglib only handles OGNL (and ignores JSP EL) the unprocessed
EL ends up in the HTML, which isn't what you want.

So, by just changing the rtexprvalue's on the tags you want (and being
careful what you're using the JSP EL for) you can restore the old
functionality on a tag by tag basis.
  (*Chris*)

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to