Details
Description
http://www.nabble.com/Grails-pass-SQL-Injection-Test--to21681856.html#a21686779
The application taglib tags should not do any kind of encoding if the default encoding is already set. Although this was only discussed in the context of "fieldValue", it may well occur elsewhere, too.
Issue Links
- is related to
-
GRAILS-9247
g:fieldValue doesn't encode the value when it is used as a tag and the default codec is set to "html".
-
fixed for fieldValue. I tried some of the other tags but couldn't get the same behavior (double encoding).