Bear Bibeault

Post the code here. Be sure to UseCodeTags <-- (that's a link)

Absolute positioning will not help this and, in general, is not something that should be used except in special circumstances.

We need to see the CSS of the problem page to find out why things are acting strangely. By default, the parent container will stretch to the size of its children and not clip them.

That seems crazy to me. If the account name is invalid, an error should be thrown.

By trying to adjust an invalid account name to a valid one, you are actually decreasing the security of your app.

Rithanya Laxmi wrote:
Initial URL with special char,

https://test.xxx.com/accountDisplay.jsp?accountName=%test"test1(=%

Where does this URL come from in the first place? Why aren't the special characters removed before it even becomes a link?

You do not seem to be getting the point: you do not need to perform a check. If there are no characters to change, the replace operation will leave everything as is. The check is pointless and useless.

Again, why do you need to check?

Just call the replace and let it do its thing. If there aren't any character to replace, it won't do anything.

Dave Tolls wrote:cout has an escapeXml attribute that (I believe) would need to be set to true to actually escape the HTML.

It is set to true by default.

I don't know anything about the quality of the lessons themselves, but the syllabus you posted looks like a good roadmap.

Why do you need to check first?

The script text is displayed. But it is not script -- it is the escaped characters that make up the script. Look at the source HTML being sent to the browser.

Rithanya Laxmi wrote:I want to handle this from client side/JSP.

JSP is not client-side. JSP is a server-side technology. Please read this article to understand how JSP works.

<c:out> should work fine.

Why on Earth would you be contemplating an Applet in 2019?

Tim Moores wrote:I think the better approach is to debug why it doesn't work.

Quoted for truth. When the conventional approach isn't working, you find out why it's not working, not look for a different approach.

Why do you feel that you need an alternative to the solutions you already know about?

Scriptlets and the JSTL/EL are not meant to work together -- they are purposefully designed as such to discourage the use of scriptlets. What are you trying to accomplish via the scriptlet variable that can be accomplished by better means?