igor, thanks for chiming in. rgards.
--- On Tue, 7/6/10, Igor Vaynberg <igor.vaynb...@gmail.com> wrote:
> From: Igor Vaynberg <igor.vaynb...@gmail.com>
> Subject: Re: Configure Wicket to detect some special HTML characters?
> To: users@wicket.apache.org
> Date: Tuesday, July 6, 2010, 10:18 PM
> there is no system-wide setting to
> disable this because doing so opens
> a bunch of security holes.
>
> -igor
>
> On Tue, Jul 6, 2010 at 6:30 PM, David Chang <david_q_zh...@yahoo.com>
> wrote:
> >
> > Jeremy, thanks for the advice, which is indeed
> correct. I tried it and it the default behavior for labels.
> >
> > I do have annother related question. I read Component
> API, which Label and other components inherit, and notice
> that it has a method:
> >
> > public final Component setEscapeModelStrings(boolean
> escapeMarkup)
> >
> > I further traced its source code, and it seems to me
> that escaping HTML is true by default for Componnent and its
> decedents, correct?
> >
> > what if I want to the HTML escape is false by default
> for Components and all its decendents? Any elegant way? In
> Spring, it can be a system-wide configuration, which can be
> overriden on a particular page.
> >
> > Hope this is not too much asking.
> >
> > Regards.
> >
> >
> > --- On Tue, 7/6/10, Jeremy Thomerson <jer...@wickettraining.com>
> wrote:
> >
> >> From: Jeremy Thomerson <jer...@wickettraining.com>
> >> Subject: Re: Configure Wicket to detect some
> special HTML characters?
> >> To: users@wicket.apache.org
> >> Date: Tuesday, July 6, 2010, 9:41 AM
> >> A label automatically escapes markup.
> >> It would take you about one minute to
> >> try this on an app you have. That would have saved
> you (and
> >> us) a lot of
> >> emails. Just give it a try.
> >>
> >> Jeremy Thomerson
> >> -- sent from my smartphone - please excuse
> formatting and
> >> spelling errors
> >>
> >> On Jul 6, 2010 8:27 AM, "David Chang" <david_q_zh...@yahoo.com>
> >> wrote:
> >>
> >> Can Wicket be configured to do this html escape
> without
> >> requiring a
> >> programmer to manually write calls to
> >> Strings#escapeMarkup?
> >>
> >>
> >> --- On Tue, 7/6/10, Pedro Santos <pedros...@gmail.com>
> >> wrote:
> >>
> >> > From: Pedro Santos <pedros...@gmail.com>
> >>
> >> > Subject: Re: Configure Wicket to detect some
> special
> >> HTML characters?
> >> > To: us...@wicket.apache.or...
> >> > Date: Tuesday, July 6, 2010, 8:25 AM
> >>
> >> > Hi David, there are a lot of methods
> >> > that escape the characters, for
> >> > instance you can use
> >> > or...
> >>
> >
> >
> >
> >
> >
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
> > For additional commands, e-mail: users-h...@wicket.apache.org
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
> For additional commands, e-mail: users-h...@wicket.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org
