How to set configuration to always using ?html ?
"Newman, John W" <[email protected]>
| Newsgroups | gmane.comp.web.freemarker.user |
|---|---|
| Message-ID | <EE3D0D387D01C8498EC1CED489DEAB2537F8711F27@msxmbxnsprd01.acct.upmchs.net> |
Hi,
I just found out that I need to always use ?html in html pages! I entered <script>alert('boo');</script> on a text field, and got an alert on the next page that output this value!
So I can go through all my web pages search for ${.*} and replace it with ${.*?html}, but isn't there a simple way to set that in the configuration? I haven't been able to find it thus far, any help is appreciated. Also is there any reason that would not be a good idea, even if I am always rendering html?
Thanks,
John
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
FreeMarker-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/freemarker-user