Monthly Archives: April 2010

CRSF token and spring

http://seamframework.org/Documentation/CrossSiteScripting <h:outputText value=”#{param.name}” escape=”false”/> <!– DON’T DO THIS! XSS SECURITY HOLE! –> but do this: <h:outputText value=”#{myBean.myTextContent}” escape=”false”/> <!– Content contains &entity; and is already safe! –>

Junit fork=”yes” dir=”${some.dir}” sets the working dir to ${some.dir} which ignores classpath specified in the test

Junit tests failed when executed by ant but they were successful when I executed them from eclipse. Reason was the dir parameter in junit ant task. It was specifying the the folder which should act as the root folder and this somehow was blocking the classpath specified. and I was looking for a file in [...]

Follow

Get every new post delivered to your Inbox.