Is there Java counterpart for Aspnet 4's <%: %> XSS prevention?
- by Tomas Tintera
I'm developer moving from C# to Java. Heard about new ASP net feature.
<%: %. It renders object with html encoding. Only these impolementing IHtmlString interface are not encoded (to prevent double encoding).
See more in http://weblogs.asp.net/scottgu/archive/2010/04/06/new-lt-gt-syntax-for-html-encoding-output-in-asp-net-4-and-asp-net-mvc-2.aspx
Is such cute tool in Java side? I mean a way to output a string to webpage and (not)encode it based on it's type.