Home/ Questions/Q 973753
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-16T03:19:35+00:00

I have a situation where users can submit feedback through a textarea on a

  • 0

I have a situation where users can submit feedback through a textarea on a HTML page or JSP. This works fine and the text ends up in the database.

But, can anyone suggest any safeguards which could prevent somebody trying to submit malicious scripts which could possibly affect the page’s behaviour?

I am aware of parsing the text entered and converting any < to ‘&LT’; and > to ‘&GT’; But is there anything more I could do to validate the entered text?

Thanks

Mr Morgan

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Check this out:
    Recommended method for escaping HTML in Java

    See Apache StringEscapeUtils

    escapeJavaScript
    and
    escapeHtml

    • 0