How to handle xss attack on search input field in jsp?

Asked May 09 '18 at 12:19

Active May 10 '18 at 11:24

Viewed 208 times

How to add c:out for input search box ?

<input type="text" name="search" id="search" />

Now if the user enters some invalid string(">) in the text box, the html renders it and impacting the UI

I tried adding, 
    <input type="text" name="search" value="<c:out value=""/>" id="search" />
but not working for input search boxes.

Please give me some suggestions Thanks

edited May 10 '18 at 11:24

asked May 09 '18 at 12:19

Sankar C

Can you show the entire code? – Cillian Collins May 10 '18 at 09:35
If you are using jsp and servlet then you can use filter for that – Sanjay May 11 '18 at 12:38

0 Answers0