Added Spring escapeBody sample

dschadow · dschadow · commit a6d034267911 · 2015-01-10T14:49:16.000+01:00
diff --git a/Ch04_OutputEscapingJSP/src/main/webapp/WEB-INF/views/contact.jsp b/Ch04_OutputEscapingJSP/src/main/webapp/WEB-INF/views/contact.jsp
@@ -1,5 +1,6 @@
 <%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>
 <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
+<%@ taglib prefix="s" uri="http://www.springframework.org/tags" %>
 <html>
     <head>
         <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
@@ -9,10 +10,13 @@
     <body>
         <h1>Ch04_OutputEscapingJSP: New Contact</h1>
 
-        <h2>Input with direct value expression</h2>
-        <p><strong>Hello</strong> ${contact.firstname} ${contact.lastname}</p>
+        <h2>Input displayed as direct value expression</h2>
+        <p><strong>Contact details:</strong> ${contact.firstname} ${contact.lastname}</p>
 
-        <h2>Input with out element</h2>
-        <p><strong>Hello</strong> <c:out value="${contact.firstname}" /> <c:out value="${contact.lastname}" /></p>
+        <h2>Input displayed as out element</h2>
+        <p><strong>Contact details:</strong> <c:out value="${contact.firstname}" /> <c:out value="${contact.lastname}" /></p>
+
+        <h2>Input displayed inside Spring escapeBody element as direct value expression</h2>
+        <p><strong>Contact details:</strong> <s:escapeBody htmlEscape="true">${contact.firstname} ${contact.lastname}</s:escapeBody> </p>
     </body>
 </html>
