Re: Dealing with XSS in struts

2004-05-06 Thread jeff mutonho
Basically I'm doing this (in my jsp) <% String mode = request.getParameter("mode"); %> Would , encoding every field/attribute in the form bean , be a viable option? jeff mutonho Craig McClanahan <[EMAIL PROTECTED]> wrote: Van Riper, Mike wrote: >>

Dealing with XSS in struts

2004-05-05 Thread jeff mutonho
eals a pop-up box containing the currently set cookies. How can I block that from happening?Is there a way of encoding a form bean?Please help as this is critical to the app. jeff mutonho - Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs