From be7ad56dc1e9f80d5edd13b531024b15046a31d7 Mon Sep 17 00:00:00 2001 From: Knut Forkalsrud Date: Wed, 18 Aug 2010 22:01:37 -0700 Subject: [PATCH] Take care of HTML escaping of Velocity references. --- src/main/webapp/WEB-INF/velocity.properties | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/main/webapp/WEB-INF/velocity.properties b/src/main/webapp/WEB-INF/velocity.properties index bee571b..e3ba7d5 100644 --- a/src/main/webapp/WEB-INF/velocity.properties +++ b/src/main/webapp/WEB-INF/velocity.properties @@ -4,3 +4,5 @@ velocimacro.permissions.allow.inline.local.scope=true velocimacro.context.localscope=false velocimacro.library.autoreload=true output.encoding = UTF-8 +eventhandler.referenceinsertion.class = org.apache.velocity.app.event.implement.EscapeHtmlReference +eventhandler.escape.html.match = /.*/