XSS and jboss-el

ccrouch Jul 19, 2007 6:03 PM

I saw this blog http://raibledesigns.com/rd/entry/java_web_frameworks_and_xss
and wondered how jboss-el handled escaping XML? Does it do it by default? May be it should?

Cheers

1. Re: XSS and jboss-el

ellenzhao Jul 19, 2007 6:28 PM (in response to ccrouch)

now someone is talking about el, MVEL is so good I wonder why jboss does not take it as jboss-el? The current jboss-el is not standard-comform neither, anyway.
Actions
2. Re: XSS and jboss-el

gavin.king Jul 20, 2007 4:18 AM (in response to ccrouch)

I saw this blog http://raibledesigns.com/rd/entry/java_web_frameworks_and_xss
and wondered how jboss-el handled escaping XML? Does it do it by default? May be it should?

The EL does not, but Facelets does.
Actions