Re: check response on app
Lukasz Lenart <[email protected]> Fri, 26 Jun 2026 12:34:12 +0200
| Newsgroups | gmane.comp.jakarta.struts.devel |
|---|---|
| Message-ID | <CAMopvkMTacu+VGuhLm_PX_hqqfrcAio=bWZ2UZvL10anaBwbwg@mail.gmail.com> |
=C5=9Br., 24 cze 2026 o 11:31 Greg Huber <[email protected]> napisa=C5=82= (a): > > Looking into this, basically you cannot use escapeHtml=3Dfalse and > escapeJavaScript=3Dtrue and have <b></b> <strong></strong> <em></em> etc > work. There is too much of an overlap between > what StringEscapeUtils.escapeEcmaScript(result) does trying to escape > slashes with html slashes (ie you get <b><\/b>, an unterminated <b> > which messes with the layout). > > Guess I will need remove escapeHtml=3Dfalse. > > https://struts.apache.org/tag-developers/property-tag > > Maybe there should be a warning on the escapeHtml tag text not to set to > false without setting escapeJavaScript=3Dtrue, otherwise it will execute > the "script" in the response. Does this sound good? https://issues.apache.org/jira/browse/WW-5639 Cheers =C5=81ukasz