Escape HTML entities in JSP / JSPX: no solution for problem that should not even exist?
问题 We use jspx as template engine. We have dozen of screens with hundreds of el expressions like ${user.firstName} or "${mail.subject}" And all this HTML code is not escaped by default. If there would be something with < or " in field -- screen will fail. We can always use fn:escapeXml but doing so in all places really boring. 1) Does there is a way to do escape by default? The only way I know is to hack JSP compiler (like jasper for tomcat). But it is not a way to go. 2) Why somebody may ever