java - XSS attacks in jsp -

-

hi have jsp page in following lines

if(exception err) {   out.println (err.getmessage() + "<br/><br/>"); }

may xss attacks want display above things without xss attacks thought ?

use c:out tag.

also see


Comments

Post a Comment

Popular posts from this blog

python - Does anyone know how to configure the hunpos wrapper class on nltk? -

-
i've tried following code , installed http://code.google.com/p/hunpos/downloads/list english-wsj-1.0 hunpos-1.0-linux.tgz i've extracted file onto '~/' directory and when tried following python code: import nltk nltk.tag import hunpos nltk.tag.hunpos import hunpostagger import os, sys, re, glob cwd = os.getcwd() infile in glob.glob(os.path.join(cwd, '*.txt')): (path, filename) = os.path.split(infile) read = open(infile) ht = hunpostagger('english.model') ht.tag(read.readline()) i following error traceback (most recent call last): file "<stdin>", line 4, in <module> file "/usr/local/lib/python2.6/dist-packages/nltk-2.0b9-py2.6.egg/nltk/tag/hunpos.py", line 46, in __init__ verbose=verbose) file "/usr/local/lib/python2.6/dist-packages/nltk-2.0b9-py2.6.egg/nltk/internals.py", line 503, in find_binary raise lookuperror('\n\n%s\n%s\n%s' % (div, msg, div...
Read more

mysql - How to insert just year and month into date field? -

-
i have column called table_date using now() insert current date ( 2011-02-23 ). know can manipulate sql/php show me year , monthname. however, want know if it's possible insert table_date current date year-month 2011-02 ? thanks a date field going full date, , far know, required specify full date. it might easiest use 01 , 2011-02-01 february 2011. obviously, can format output of date field liking when querying it: select date_format(fieldname,"%y-%m");
Read more