Does the Struts2 tag escape HTML by default?

Question

Unless escapeHtml="false" is explicitly set, the <s:property> tag escapes HTML by default:

<s:property value="someValue" />
<!-- the HTML contained in "someValue" will be escaped. -->

Does <s:set> also behave this way ?

<s:set var="myVariable" value="someValue" />
<!-- will the HTML contained in "someValue" be escaped ? -->

The real question is why not upvoting the answer... BTW I've edited the question since the culprit for the downvote seemed to be a lack of clarity. Now it should be crystal clear. — Andrea Ligios, May 14 '15 at 15:36

score 2 · Accepted Answer · answered May 13 '15 at 15:09

No, <s:set> tag doesn't escape anything on its own.

But you can exploit the <s:property /> escaping capabilities by using it in the <s:set/> body.

Not escaped:

<s:set var="myVariable" value="someValue" />

Escaped:

<s:set var="myVariable">
    <!-- the following value will be escaped -->
    <s:property value="someValue" />
</s:set>

1 Answers1