Results 1 to 3 of 3

Thread: Ofbiz: How to escape characters in ofbiz widget

  1. #1
    Join Date
    May 2015
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default Ofbiz: How to escape characters in ofbiz widget

    I need to display in browser, a value that comes from url parameters. To avoid XSS attacks this value should to be escaped.

    The value is set in PScreens.xml as following :

    HTML Code:
    <screen name="Product">
    <section>
     <actions>
      <set field="productId" from-field="parameters.productId"/>
     </actions>
    <widgets>
     ...
    </widgets>
    And is included in PForms.xml :

    HTML Code:
    <field name="productId" tooltip="${uiLabelMap.ProductId} [${productId}]"><text /></field>
    Initially I tried to escape the value from PForms.xml:

    HTML Code:
    tooltip="${uiLabelMap.ProductId} [${productId}]"
    but I did not found any solution.

    Can you suggest a solution to escape the value from PScreens.xml?

    HTML Code:
    <set field="productId" from-field="parameters.productId"/>
    Thank You.

  2. #2
    Join Date
    May 2015
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default

    Does anyone have any suggestions?

  3. #3
    Join Date
    May 2015
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts

Similar Threads

  1. OFBiz
    By alim27 in forum Java
    Replies: 6
    Last Post: 08-08-2012, 10:15 PM
  2. Ofbiz Application Need to Restart
    By ofbizprod in forum Java
    Replies: 0
    Last Post: 11-23-2011, 07:12 AM
  3. Ofbiz: call same controller on refresh
    By Durgesh in forum Java
    Replies: 0
    Last Post: 10-18-2011, 07:07 AM
  4. ASK: Ofbiz Web Service Client
    By ryo in forum Java
    Replies: 0
    Last Post: 07-25-2011, 11:10 AM
  5. Getting Started with OfBiz
    By sathiyapriya in forum Other
    Replies: 0
    Last Post: 07-20-2009, 01:06 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •