Re: check response on app

Lukasz Lenart <[email protected]> Fri, 26 Jun 2026 12:34:12 +0200
Newsgroups gmane.comp.jakarta.struts.devel
Message-ID <CAMopvkMTacu+VGuhLm_PX_hqqfrcAio=bWZ2UZvL10anaBwbwg@mail.gmail.com>
=C5=9Br., 24 cze 2026 o 11:31 Greg Huber <[email protected]> napisa=C5=82=
(a):
>
> Looking into this, basically you cannot use escapeHtml=3Dfalse and
> escapeJavaScript=3Dtrue and have <b></b> <strong></strong> <em></em> etc
> work.  There is too much of an overlap between
> what StringEscapeUtils.escapeEcmaScript(result) does trying to escape
> slashes with html slashes (ie you get <b><\/b>, an unterminated <b>
> which messes with the layout).
>
> Guess I will need remove escapeHtml=3Dfalse.
>
> https://struts.apache.org/tag-developers/property-tag
>
> Maybe there should be a warning on the escapeHtml tag text not to set to
> false without setting escapeJavaScript=3Dtrue, otherwise it will execute
> the "script" in the response.

Does this sound good?
https://issues.apache.org/jira/browse/WW-5639


Cheers
=C5=81ukasz