|
10 | 10 | <spring:bind path="employeeForm.user.contactInfo.firstName"> |
11 | 11 | <th><fmt:message key="entity.contactInfo.firstName" /></th> |
12 | 12 | <td> |
13 | | - <input type="text" name="${status.expression}" value="${status.value}" /> |
| 13 | + <input type="text" name="${status.expression}" value="${fn:escapeXml(status.value)}" /> |
14 | 14 | <c:forEach items="${status.errorMessages}"> |
15 | 15 | <span class="error"><fmt:message key="error.sign" /></span> |
16 | 16 | </c:forEach> |
|
21 | 21 | <spring:bind path="employeeForm.user.contactInfo.lastName"> |
22 | 22 | <th><fmt:message key="entity.contactInfo.lastName" /></th> |
23 | 23 | <td> |
24 | | - <input type="text" name="${status.expression}" value="${status.value}" /> |
| 24 | + <input type="text" name="${status.expression}" value="${fn:escapeXml(status.value)}" /> |
25 | 25 | <c:forEach items="${status.errorMessages}"> |
26 | 26 | <span class="error"><fmt:message key="error.sign" /></span> |
27 | 27 | </c:forEach> |
|
32 | 32 | <spring:bind path="employeeForm.user.contactInfo.email"> |
33 | 33 | <th><fmt:message key="entity.contactInfo.email" /></th> |
34 | 34 | <td> |
35 | | - <input type="text" name="${status.expression}" value="${status.value}" /> |
| 35 | + <input type="text" name="${status.expression}" value="${fn:escapeXml(status.value)}" /> |
36 | 36 | <c:forEach items="${status.errorMessages}"> |
37 | 37 | <span class="error"><fmt:message key="error.sign" /></span> |
38 | 38 | </c:forEach> |
|
43 | 43 | <spring:bind path="employeeForm.user.contactInfo.web"> |
44 | 44 | <th><fmt:message key="entity.contactInfo.web" /></th> |
45 | 45 | <td> |
46 | | - <input type="text" name="${status.expression}" value="${status.value}" /> |
| 46 | + <input type="text" name="${status.expression}" value="${fn:escapeXml(status.value)}" /> |
47 | 47 | <c:forEach items="${status.errorMessages}"> |
48 | 48 | <span class="error"><fmt:message key="error.sign" /></span> |
49 | 49 | </c:forEach> |
|
54 | 54 | <spring:bind path="employeeForm.user.contactInfo.phone1"> |
55 | 55 | <th><fmt:message key="entity.contactInfo.phone1" /></th> |
56 | 56 | <td> |
57 | | - <input type="text" name="${status.expression}" value="${status.value}" /> |
| 57 | + <input type="text" name="${status.expression}" value="${fn:escapeXml(status.value)}" /> |
58 | 58 | <c:forEach items="${status.errorMessages}"> |
59 | 59 | <span class="error"><fmt:message key="error.sign" /></span> |
60 | 60 | </c:forEach> |
|
65 | 65 | <spring:bind path="employeeForm.user.contactInfo.phone2"> |
66 | 66 | <th><fmt:message key="entity.contactInfo.phone2" /></th> |
67 | 67 | <td> |
68 | | - <input type="text" name="${status.expression}" value="${status.value}" /> |
| 68 | + <input type="text" name="${status.expression}" value="${fn:escapeXml(status.value)}" /> |
69 | 69 | <c:forEach items="${status.errorMessages}"> |
70 | 70 | <span class="error"><fmt:message key="error.sign" /></span> |
71 | 71 | </c:forEach> |
|
76 | 76 | <spring:bind path="employeeForm.user.contactInfo.fax"> |
77 | 77 | <th><fmt:message key="entity.contactInfo.fax" /></th> |
78 | 78 | <td> |
79 | | - <input type="text" name="${status.expression}" value="${status.value}" /> |
| 79 | + <input type="text" name="${status.expression}" value="${fn:escapeXml(status.value)}" /> |
80 | 80 | <c:forEach items="${status.errorMessages}"> |
81 | 81 | <span class="error"><fmt:message key="error.sign" /></span> |
82 | 82 | </c:forEach> |
|
0 commit comments