3 ms·

you have misunderstood. the problem (afaict - see link below) is that spring may be evaluating where the programmer intended only to display. see my comment a

you have misunderstood. the problem (afaict - see link below) is that spring may be evaluating where the programmer intended only to display. see my comment at http://news.ycombinator.com/item?id=5083163 http://news.ycombinator.com/item?id=5083163 the programmer is not evaluating unvalidated text. the programmer is only displaying it. the bug in spring is causing the unexpected, additional evaluation. see, for example, section 3 of https://docs.google.com/document/d/1dc1xxO8UMFaGLOwgkykYdghGWm_2Gn0iCrxFsympqcE/edit?hl=en_US&pli=1 https://docs.google.com/document/d/1dc1xxO8UMFaGLOwgkykYdghG...

manishsharan 14y ago
No I am not mistaken. I have been using this taglib and EL when renedering JSPs. This is how most people use this EL http://stackoverflow.com/questions/10981559/how-to-change-value-of-code-in-springmessage-code http://stackoverflow.com/questions/10981559/how-to-change-va... http://www.coderanch.com/t/489232/Spring/spring-message-tag-labels-java http://www.coderanch.com/t/489232/Spring/spring-message-tag-... See that ? Nobody is using request parameters because that would be fucking stupid. This is a an Expression Evaluation Engine --- it evaluates expressions. Every programmer who uses this knows this. Please stop spreading the FUD!
- deleted 14y ago
  [deleted]