• Home
• org.codehaus.sonar-plugins
• sonar-web-plugin
• 2.3
• source code
• JspScriptletCheck.html

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

org.sonar.l10n.web.rules.Web.JspScriptletCheck.html Maven / Gradle / Ivy

JSP scripts have been deprecated because they:

  
Are not unit testable.
  
Are not reusable.
  
Cannot make use of object oriented concepts such as inheritence.
  
Have poor error handling capabilities: if an exception is thrown, an empty page is rended.
  
Mix the business and presentation logic.



JSP Standard Tag Library (JSTL) and Expression Language should be used instead,
enabiling the adoption of the model-view-controller (MVC) design pattern
which reduces the coupling between the presentation tier and the business logic.


Noncompliant Code Example
<input type="text" name="foo" value="<%= request.getParameter("foo") %>" />


Compliant Solution
<input type="text" name="foo" value="${fn:escapeXml(param.foo)}" />