on 7/15/02 6:43 AM, "Ed Yu" <[EMAIL PROTECTED]> wrote:

> I'm looking into JSP migration to Velocity. There is one feature that
> the <bean:write ... filter="true"> tag offer, the ability to filer
> special html characters (<, >, &, etc...). Currently is there a "tool"
> to perform such filtering?

Even better than Geir's suggestion (which is terribly not MVC and prone to
mistakes...what if you forget to filter some user supplied data? You then
have a cross site scripting hole)...is to write a ReferenceInsertionFilter
to do what you want...

<http://scarab.tigris.org/source/browse/scarab/src/java/org/tigris/scarab/ut
il/ReferenceInsertionFilter.java?rev=1.11&content-type=text/x-cvsweb-markup>

-jon


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to