jsp - XSS prevention using fn:escapeXml() leaves the user input escaped -


i using fn:escapexml(bean.field) in jsp input tags' value attributes. see if user types special characters , hits on save button, input gets escaped , shown in text box. instance if type "mr & mrs" , hit on save, shown in screen "mr & mrs". user community says ambiguous. must see "mr & mrs". going wrong here. how fix this.

thanks uma


Comments

Popular posts from this blog

ubuntu - PHP script to find files of certain extensions in a directory, returns populated array when run in browser, but empty array when run from terminal -

php - How can i create a user dashboard -

javascript - How to detect toggling of the fullscreen-toolbar in jQuery Mobile? -