-
Notifications
You must be signed in to change notification settings - Fork 28
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
2 changed files
with
76 additions
and
6 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,68 @@ | ||
<?xml version="1.0" encoding="UTF-8" ?> | ||
<!-- | ||
Copyright (c) 2010, 2020 Oracle and/or its affiliates. All rights reserved. | ||
This program and the accompanying materials are made available under the | ||
terms of the Eclipse Public License v. 2.0, which is available at | ||
http://www.eclipse.org/legal/epl-2.0. | ||
This Source Code may also be made available under the following Secondary | ||
Licenses when the conditions for such availability set forth in the | ||
Eclipse Public License v. 2.0 are satisfied: GNU General Public License, | ||
version 2 with the GNU Classpath Exception, which is available at | ||
https://www.gnu.org/software/classpath/license.html. | ||
SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0 | ||
--> | ||
|
||
<taglib xmlns="http://java.sun.com/xml/ns/j2ee" | ||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" | ||
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-jsptaglibrary_2_0.xsd" | ||
version="2.0"> | ||
<description> | ||
Validates JSP pages to prohibit use of scripting elements. | ||
</description> | ||
<tlib-version>1.1</tlib-version> | ||
<short-name>scriptfree</short-name> | ||
<uri>http://jakarta.apache.org/taglibs/standard/scriptfree</uri> | ||
|
||
<validator> | ||
<description> | ||
Validates prohibitions against scripting elements. | ||
</description> | ||
<validator-class> | ||
jakarta.servlet.jsp.jstl.tlv.ScriptFreeTLV | ||
</validator-class> | ||
<init-param> | ||
<description> | ||
Controls whether or not declarations are considered valid. | ||
</description> | ||
<param-name>allowDeclarations</param-name> | ||
<param-value>false</param-value> | ||
</init-param> | ||
<init-param> | ||
<description> | ||
Controls whether or not scriptlets are considered valid. | ||
</description> | ||
<param-name>allowScriptlets</param-name> | ||
<param-value>false</param-value> | ||
</init-param> | ||
<init-param> | ||
<description> | ||
Controls whether or not top-level expressions are considered valid. | ||
</description> | ||
<param-name>allowExpressions</param-name> | ||
<param-value>false</param-value> | ||
</init-param> | ||
<init-param> | ||
<description> | ||
Controls whether or not expressions used to supply request-time | ||
attribute values are considered valid. | ||
</description> | ||
<param-name>allowRTExpressions</param-name> | ||
<param-value>false</param-value> | ||
</init-param> | ||
</validator> | ||
</taglib> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters