Stack Overflow
Stack Overflow

Questions tagged [html-escape]

50 questions
0
votes
1 answer

Sanitizing HTML at onsubmit in a form

I read this and I did the below. $confirmation = htmlspecialchars( 'return confirm("' . esc_html__( 'Do you really want to delete?', 'tor-child' ) . '");' ); $output .= '
'; Security is…
mewiben39
  • 121
  • 9
0
votes
1 answer

How to unescape html (in String) in Koreander templates?

I am using lukasjapan/koreander library along with its ktor-support version, and when I call ViewModel(Res class) topbar variable from in kor file, it escapes the html String. This is how I'm calling ktor to serve web-pages: suspend fun main() =…
Animesh Sahu
  • 7,445
  • 2
  • 21
  • 49
0
votes
1 answer

How to escape especial charters like < > in sql query?

the description should look like - Aircraft Configuration function in the field. but it's displaying in DB as it is but when checked in UI by retrieving it's displaying like ---"Aircraft Configuration function in the field." here the…
ash
  • 1
0
votes
0 answers

Escape html all posted values

why $this->input->post(NULL,TRUE) don't escape html tags ? is there any hook to replace < character with empty in codeigniter?
Mohammadreza Esmaeeli
  • 163
  • 2
  • 13
0
votes
1 answer

How to have Retrofit to unescape HTML escaped symbols?

I use Retrofit2 and GSON to deserialize incoming JSON. Here is my code in Android app: public class RestClientFactory { private static GsonBuilder gsonBuilder = GsonUtil.gsonbuilder; private static Gson gson; private static…
Alexei
  • 14,350
  • 37
  • 121
  • 240
0
votes
1 answer

Backslash escape not working in HTML attributes

I tried below code for checking whether backslashes in HTML attribute value makes the character next to it escape: Here, if backslash works, then…
Jishnu Raj
  • 1
  • 2
0
votes
1 answer

wpcf7 dynamic email-tag content

Description: WordPress Contact Form 7; Mailing using smtp; Form Settings: "use html-format" + "mail2 use html-format" checked; Form Settings: Email body : just one mail-tag [calculated-template]; Problem with paragraph tag solved (all mail-tags…
Dmitry Rasko
  • 1
  • 2
0
votes
1 answer

React/Phoenix - escaping HTML will briefly flash unrendered HTML in browser

I'm running a React/Phoenix app that uses server-side rendering, and I'm finding that when I refresh the app rapidly, I can for a split second see the unrendered HTML from the server in the browser before it all renders correctly. This only happens…
skwidbreth
  • 7,888
  • 11
  • 58
  • 105
0
votes
0 answers

How can you remove XML escaped characters from a stored JSP (JSTL) variable?

I'm trying to compare the values of two strings in a jsp file. Both of these strings contain an apostrophe '. These strings some from different sources. When I directly compare the two strings like this:
jros
  • 714
  • 1
  • 10
  • 33
0
votes
0 answers

f:selectItem itemEscaped=false not unescaping HTML in p:selectOneButton labels

I'm working with PrimeFaces 5.3. I have the next f:selectItem in a p:selectOneButton It shows directly this html code:
user1364684
  • 800
  • 2
  • 8
  • 28
0
votes
1 answer

html markup in messages properties with placeholders - XSS potential

Given the message in a messages properties file: message = Change relation {0} -> {1} to {2} -> {3}? if the content of any of the placeholders is a user-influenced string, I need to…
SebastianRiemer
  • 1,495
  • 2
  • 20
  • 33
0
votes
3 answers

Rails 3 - How to escape flash message

Should the flash message be escaped automatically by Rails? If not, how to ensure message gets escaped (without using CGI::escapeHTML)? After doing some searching, I figured out that it should be escaped, and one got to html_safe a message to…
Anton R
  • 181
  • 2
  • 11
0
votes
1 answer

Prevent ZF2 formHelper escaping attributes

Hi I have a form with a number field. I use regex to validate the field. For that reason I added the pattern attribute the element. However when I use formText it html escapes the regex pattern. //inside the form _construct $this->add(array( …
Heinrich Kruger
  • 11
  • 2
0
votes
1 answer

How to avoid HTML escaping in noscript tag when including content using SSI

I have a jsp page with The include contains Text Result which I expect is the "Text" displayed in the browser. Instead of that I get "Text" displayed in the browser. Can I somehow…
Ma Kro
  • 1,232
  • 4
  • 20
  • 34
0
votes
1 answer

JSF OutputText with html style

I need a output text which works like h:outputText with escape="false" attribute, but doesn't let scripts to run. After a little search I found tr:outputFormatted makes that, but in our project we doesn't use trinidad. Is there something like…
Utkan Ozyurek
  • 638
  • 7
  • 20
1 2
3
4