Might be a wrong choice of
word.
1) In the confirm.jsp we have a 'confirm' hyper-link (designed fancily to appear as a button).
2) confirm.jsp uses the value of fwdUrl request param as the path of the hyper link.
3) <a href="${param.fwdUrl}">
4) User clicks on the hyperlink.
Note: I wrote that I send fwdUrl as a request parameter to confirm.jsp from ServletA.
- I used following scritplet in confirm.jsp for debugging.
<%= request.getParameter("fwdUrl") %> : the output of fwdUrl is plain, not encoded.
So, I am looking to
1)encode 'fwdUrl' again there itself in href element of JSP
OR
2) follow some alphanumeric encoding in the ServletA itself, so that fwdUrl will not be decoded by the container before passing it to confirm.jsp.
I hope, I did not make any mistakes this time
