Matt RaibleMatt Raible is a Web Developer and Java Champion. Connect with him on LinkedIn.

The Angular Mini-Book The Angular Mini-Book is a guide to getting started with Angular. You'll learn how to develop a bare-bones application, test it, and deploy it. Then you'll move on to adding Bootstrap, Angular Material, continuous integration, and authentication.

Spring Boot is a popular framework for building REST APIs. You'll learn how to integrate Angular with Spring Boot and use security best practices like HTTPS and a content security policy.

For book updates, follow @angular_book on Twitter.

The JHipster Mini-Book The JHipster Mini-Book is a guide to getting started with hip technologies today: Angular, Bootstrap, and Spring Boot. All of these frameworks are wrapped up in an easy-to-use project called JHipster.

This book shows you how to build an app with JHipster, and guides you through the plethora of tools, techniques and options you can use. Furthermore, it explains the UI and API building blocks so you understand the underpinnings of your great application.

For book updates, follow @jhipster-book on Twitter.

10+ YEARS


Over 10 years ago, I wrote my first blog post. Since then, I've authored books, had kids, traveled the world, found Trish and blogged about it all.

RECENT ENTRIES


Tag Cloud


abbie appfuse birthday denver family grails gwt jack java javascript jhipster jsf linkedin maven roller skiing softwaresummit spring springmvc struts2 travel trish vacation webframeworks wicket
« Compression Filter... | Main | Feeling the love »
Thursday July 10, 2003

JSP 2.0 Article in July JDJ

I got the July issue of JDJ today. In it I found a good article on JSP 2.0 (printable, less ads version). Things I learned from the article:

  • JSTL 1.1 will introduce 16 standardized EL functions:
    - fn:length(): Get the length of a collection or a string.
    - fn:toUpperCase(), fn:toLowerCase(): Change the capitalization of a string.
    - fn:substring(), fn:substringBefore(), fn:substringAfter(): Get a subset of a string.
    - fn:trim(): Trim whitespace from a string.
    - fn:replace(): Replace characters in a string.
    - fn:indexOf(), fn:startsWith(), fn:endsWith(), fn:contains(), fn:containsIgnoreCase(): Check if a string contains another string.
    - fn:split(): Split a string into an array.
    - fn:join(): Join a collection into a string.
    - fn:escapeXml(): Escape XML characters in a string.
  • The tag libraries in JSTL 1.1 have new URIs (for example, http://java.sun.com/jsp/jstl/core instead of the JSTL 1.0 equivalent http://java.sun.com/jstl/core_rt). The new JSTL 1.1 tag libraries accept request-time expressions for their attributes, and delegate to the JSP container to evaluate EL expressions.

Good stuff to know. I'm ready to start developing JSP 2.0 apps - I hope the Tomcat dev team releases a stable build soon. Or maybe I should just look into using Resin...

Posted in Java at Jul 10 2003, 09:54:44 PM MDT 4 Comments
Comments:

Last time I tried Resin 3 it wouldn't even start up. Though that was a couple releases back... Just wanted to warn you.

Posted by Lance on July 11, 2003 at 01:48 PM MDT #

I've been seeing a lot of suggestions recently that all <c:out/> can/should be converted to bare EL on JSP 2.0 I recently converted an application to JSP 2.0 and found that there were very few cases where I could responsibly replace <c:out/> in this way. The reason is that bare EL does not escape xml characters, and this can have very undesirable side-effects when the variable being presented is data from a database, for example. ( cross site scripting attacks ) ${fn:escapeXml(var)} offers some relief, but ${var} alone is so rarely safe that that or <c:out/> are here to stay... unfortunately.

Posted by Ken Pelletier on January 31, 2004 at 01:47 AM MST #

I now realize that the markup examples I wrote above explaining the troubles with not escaping markup were themselves not escaped.... ironic. Firstly - in my haste I'd bookmarked another entry here specifically about automating conversion from the JSTL c:out tag to bare EL expressions. That's what I was meaning to respond to... The above comments are about just that, c:out should not be converted en masse to EL. It does not escape xml characters. While I'm here - Matt, your site has been a wonderful source of information to me. Thanks!

Posted by Ken Pelletier on January 31, 2004 at 02:07 AM MST #

<%@ taglib prefix="fn" uri="http://java.sun.com/jsp/jstl/functions"%> when i put this, it shows this error: This absolute uri (http://java.sun.com/jstl/functions) cannot be resolved in either web.xml or the jar files deployed with this application' please help me.

Posted by hudz on October 06, 2006 at 07:26 AM MDT #

Post a Comment:
  • HTML Syntax: Allowed