File tree Expand file tree Collapse file tree 8 files changed +26
-17
lines changed
org.springframework.samples.petclinic/src/main/webapp/WEB-INF/jsp Expand file tree Collapse file tree 8 files changed +26
-17
lines changed Original file line number Diff line number Diff line change @@ -14,6 +14,6 @@ ex.printStackTrace(new java.io.PrintWriter(out));
14
14
15
15
<p />
16
16
<br />
17
- <a href =" <spring:url value=" /welcome.do " />" >Home</a >
17
+ <a href =" <spring:url value=" /welcome " escapeXml= " true " />" >Home</a >
18
18
19
19
<%@ include file =" /WEB-INF/jsp/footer.jsp" %>
Original file line number Diff line number Diff line change 4
4
<h2 >Find Owners:</h2 >
5
5
6
6
<spring:url value =" /clinic/owners" var =" formUrl" />
7
- <form:form modelAttribute =" owner" action =" ${ formUrl } " method =" GET " >
7
+ <form:form modelAttribute =" owner" action =" ${ fn : escapeXml( formUrl) } " method =" get " >
8
8
<table >
9
9
<tr >
10
10
<th >
20
20
</form:form >
21
21
22
22
<br />
23
- <a href =' <spring:url value="/clinic/owners/new"/>' >Add Owner</a >
23
+ <a href =' <spring:url value="/clinic/owners/new" escapeXml="true" />' >Add Owner</a >
24
24
25
25
<%@ include file =" /WEB-INF/jsp/footer.jsp" %>
Original file line number Diff line number Diff line change 1
1
2
2
<table class =" footer" >
3
3
<tr >
4
- <td ><a href =" <spring:url value=" /clinic /welcome " />" >Home</a ></td >
5
- <td align =" right" ><img src =" <spring:url value=" /images /springsource-logo.png " />" alt =" Sponsored by SpringSource" /></td >
4
+ <td ><a href =" <spring:url value=" /clinic /welcome " escapeXml= " true " />" >Home</a ></td >
5
+ <td align =" right" ><img src =" <spring:url value=" /images /springsource-logo.png " escapeXml= " true " />" alt =" Sponsored by SpringSource" /></td >
6
6
</tr >
7
7
</table >
8
8
Original file line number Diff line number Diff line change 5
5
6
6
<head >
7
7
<meta http-equiv =" Content-Type" content =" text/html; charset=UTF-8" />
8
- <link rel =" stylesheet" href =" <spring:url value=" /styles /petclinic.css " />" type =" text/css" />
8
+ <link rel =" stylesheet" href =" <spring:url value=" /styles /petclinic.css " escapeXml= " true " />" type =" text/css" />
9
9
<title >PetClinic :: a Spring Framework demonstration</title >
10
10
</head >
11
11
Original file line number Diff line number Diff line change 2
2
<%@ taglib prefix =" form" uri =" http://www.springframework.org/tags/form" %>
3
3
<%@ taglib prefix =" c" uri =" http://java.sun.com/jsp/jstl/core" %>
4
4
<%@ taglib prefix =" fmt" uri =" http://java.sun.com/jsp/jstl/fmt" %>
5
+ <%@ taglib prefix =" fn" uri =" http://java.sun.com/jsp/jstl/functions" %>
Original file line number Diff line number Diff line change 24
24
<table class =" table-buttons" >
25
25
<tr >
26
26
<td colspan =" 2" align =" center" >
27
- <a href =" <spring:url value=" ${owner.id} /edit " />" >Edit Owner</a >
27
+ <spring:url value =" {ownerId}/edit" var =" editUrl" >
28
+ <spring:param name =" ownerId" value =" ${ owner. id } " />
29
+ </spring:url >
30
+ <a href =" ${ fn: escapeXml(editUrl) } " >Edit Owner</a >
28
31
</td >
29
32
<td >
30
- <a href =" <spring:url value=" ${owner.id} /pets /new " />" >Add New Pet</a >
33
+ <spring:url value =" {ownerId}/pets/new" var =" addUrl" >
34
+ <spring:param name =" ownerId" value =" ${ owner. id } " />
35
+ </spring:url >
36
+ <a href =" ${ fn: escapeXml(addUrl) } " >Add New Pet</a >
31
37
</td >
32
38
</tr >
33
39
</table >
74
80
<table class =" table-buttons" >
75
81
<tr >
76
82
<td >
77
- <spring:url value =" ${ owner. id } /pets/{petId}" var =" petUrl" >
83
+ <spring:url value =" {ownerId}/pets/{petId}" var =" petUrl" >
84
+ <spring:param name =" ownerId" value =" ${ owner. id } " />
78
85
<spring:param name =" petId" value =" ${ pet. id } " />
79
86
</spring:url >
80
- <a href =" ${ petUrl } " >Edit Pet</a >
87
+ <a href =" ${ fn : escapeXml( petUrl) } " >Edit Pet</a >
81
88
</td >
82
89
<td ></td >
83
90
<td >
84
- <spring:url value =" ${ owner. id } /pets/{petId}/visits/new" var =" visitUrl" >
91
+ <spring:url value =" {ownerId}/pets/{petId}/visits/new" var =" visitUrl" >
92
+ <spring:param name =" ownerId" value =" ${ owner. id } " />
85
93
<spring:param name =" petId" value =" ${ pet. id } " />
86
94
</spring:url >
87
- <a href =" ${ visitUrl } " >Add Visit</a >
95
+ <a href =" ${ fn : escapeXml( visitUrl) } " >Add Visit</a >
88
96
</td >
89
97
</tr >
90
98
</table >
Original file line number Diff line number Diff line change 19
19
<spring:url value =" owners/{ownerId}" var =" ownerUrl" >
20
20
<spring:param name =" ownerId" value =" ${ owner. id } " />
21
21
</spring:url >
22
- <a href =" ${ ownerUrl } " >${ owner. firstName } ${ owner. lastName } </a >
22
+ <a href =" ${ fn : escapeXml( ownerUrl) } " >${ owner. firstName } ${ owner. lastName } </a >
23
23
</td >
24
24
<td >${ owner. address } </td >
25
25
<td >${ owner. city } </td >
Original file line number Diff line number Diff line change 1
1
<%@ include file =" /WEB-INF/jsp/includes.jsp" %>
2
2
<%@ include file =" /WEB-INF/jsp/header.jsp" %>
3
3
4
- <img src =" <spring:url value=" /images /pets.png " />" align =" right" style =" position :relative ;right :30px ;" >
4
+ <img src =" <spring:url value=" /images /pets.png " escapeXml= " true " />" align =" right" style =" position :relative ;right :30px ;" >
5
5
<h2 ><fmt:message key =" welcome" /></h2 >
6
6
7
7
<ul >
8
- <li ><a href =" <spring:url value=" /clinic /owners /form " />" >Find owner</a ></li >
9
- <li ><a href =" <spring:url value=" /clinic /vets " />" >Display all veterinarians</a ></li >
10
- <li ><a href =" <spring:url value=" /html /petclinic.html " />" >Tutorial</a ></li >
8
+ <li ><a href =" <spring:url value=" /clinic /owners /form " escapeXml= " true " />" >Find owner</a ></li >
9
+ <li ><a href =" <spring:url value=" /clinic /vets " escapeXml= " true " />" >Display all veterinarians</a ></li >
10
+ <li ><a href =" <spring:url value=" /html /petclinic.html " escapeXml= " true " />" >Tutorial</a ></li >
11
11
</ul >
12
12
13
13
<p >  ; </p >
You can’t perform that action at this time.
0 commit comments