• Post Reply Bookmark Topic Watch Topic
  • New Topic

JSTL c:out tag

 
Prema Chakravarthy
Ranch Hand
Posts: 91
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I am wondering if there is a way to configure escapeXML to be false always. I believe the default is true. I would like to do this for an entire web app.

Any help will be appreciated!
Thanks,
Prema
 
Bear Bibeault
Author and ninkuma
Marshal
Posts: 65530
108
IntelliJ IDE Java jQuery Mac Mac OS X
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
No. Why would you want to do that? The escaping is a very helpful security measure to guard against HTML-injection for user-provided data.

You can write your own custom action if you like, or (if you're using JSP 2.0) just eliminate the tag and use the EL expression in-line.
 
Prema Chakravarthy
Ranch Hand
Posts: 91
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Thanks, Bear for your response. Can you elaborate on what you mean by "write an action"?
Thanks!
 
Bear Bibeault
Author and ninkuma
Marshal
Posts: 65530
108
IntelliJ IDE Java jQuery Mac Mac OS X
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
A "custom action" is the JSP 2.0 term for what was formerly known as a custom tag.
 
Prema Chakravarthy
Ranch Hand
Posts: 91
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
i c, thanks!
 
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!