Craig McClanahan wrote the following on 3/17/2005 4:22 PM:

The unsuspecting user who displays this page will be executing
whatever JavaScript code replaces "...".  That doesn't happen if you
use <c:out> (or <bean:write> in Struts) because, by default, the "<"
character gets emitted as "&lt;" instead.

Very interesting. Thanks for pointing this out. I guess there is a reason the spec doesn't have expression evaluation set up like c:out (bean:write) does by default?


--
Rick

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to