Craig McClanahan wrote the following on 3/17/2005 4:22 PM:
The unsuspecting user who displays this page will be executing whatever JavaScript code replaces "...". That doesn't happen if you use <c:out> (or <bean:write> in Struts) because, by default, the "<" character gets emitted as "<" instead.
Very interesting. Thanks for pointing this out. I guess there is a reason the spec doesn't have expression evaluation set up like c:out (bean:write) does by default?
-- Rick
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]