java - XSS attacks in jsp -

-

hi have jsp page in following lines

if(exception err) {   out.println (err.getmessage() + "<br/><br/>"); }

may xss attacks want display above things without xss attacks thought ?

use c:out tag.

also see


Comments

Post a Comment

Popular posts from this blog

mod rewrite - Doing external redirect. .htaccess NS flag not working. How to achieve similar results? -

-
i have moved site in root's subdirectory, want keep url's still working. have achieved using following rule in htaccess: rewritecond %{request_uri} !^/subdir [nc] rewriterule ^(.*)$ /subdir/$1 [l,ns] now problem given page (lets index.php) can accessed 2 url's: mysite.com/index.php mysite.com/subdir/index.php i don't want happen avoid confusion users , avoid same content being indexed twice search engines. not htaccess, did external redirect own site creating rule in htaccess: rewriterule ^subdir/(.*)$ http://mysite.com/$1 [l,r,ns,nc] but problem creates endless loop through sub-requests. normal request leads sub-request fetching page "subdir" subdirectory, sub-request causes second rule external redirect site, starting loop on again. ns flag, found out later, useless in case of external redirects. wanted ask is, how break loop? or how transfer request made using "mysite.com/subdir/index.php" url "mysite.com/index.php"?...
Read more

mysql - How to insert just year and month into date field? -

-
i have column called table_date using now() insert current date ( 2011-02-23 ). know can manipulate sql/php show me year , monthname. however, want know if it's possible insert table_date current date year-month 2011-02 ? thanks a date field going full date, , far know, required specify full date. it might easiest use 01 , 2011-02-01 february 2011. obviously, can format output of date field liking when querying it: select date_format(fieldname,"%y-%m");
Read more