Some of the values contain HTML, like, for instance, the titles.
We are inconsistent in certain places what should the value be.
I suggest that we add that to the javadoc where appropriate, add the
<#escape ...>, and add <#noescape> where needed. That's IMO better than
adding ?html everywhere.
Ondra
On 16.9.2015 06:44, Ing. Ondřej Žižka wrote:
I think we should add <#escape x as x?html> to all templates -
unless
there's a reason not to. Is there?
This directive makes all ${...}'s HTML-escaped.
Regards,
Ondra
_______________________________________________
windup-dev mailing list
windup-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/windup-dev