Struts 2 - XSS related question
I want to escape all outgoing content sent to the broswer. Unfortunately, it is not possible to add a tag and modify jsp's at this stage. I have an interceptor which can be modified. But I'm not sure how i can get hold of the Result as it is not yet generated, when the last interceptor runs.
Is there anyway to get hold of the content sent back to the browser, 开发者_JAVA技巧so that i can escape the content. It need not be an interceptor, all i want is to put this 'escaping' code to run on all outgoing content.
There are few issues taken care in latest release of strust2(2.3.1), i do not have much idea about XSS have look at the following issues may be they can give me some idea
XSS vulnerability in javatemplates plugin
Struts 2 XSS vulnerability
精彩评论