Servlet Exception:Attribute value is quoted with " which must be escaped when used within the value

Hi,
I am trying to Migrate my application from Tomcat 5.0 to Tomcat5.5.28. I have used Struts, JSP and JSTLs in my application.
for Tomcat 5.5.28 i am getting servlet exception when rendering the jsp page.
The Exception is:
[ServletException in:/home/home1l/proposal_list.jsp] /home/home1l/proposal_list.jsp(497,59) Attribute value
MyPermissions.PERMISSION1
is quoted with " which must be escaped when used within the value .

The code in JSP page is:
<permissions:hasAnyNetworkSettings networkSettings="<%=MyPermissions.PERMISSION1%>">

The same code is working fine with Tomcat5.0.

Can somebody please help.

Tomcat versions prior to 5.5.27 doesn't follow the quote requirements of Jsp Spec. Tomcat version 5.5.27 onwards quotes are checked strictly. Nested quotes has to be escaped.
what does MyPermissions.PERMISSION1 return?

<permissions:hasAnyNetworkSettings networkSettings="<%=MyPermissions.PERMISSION1%>">

You may use single quotes as shown below

tld file for this Tag is like this:
<tag>
<name>hasAnyNetworkSettings</name>
<tagclass>HasAnyNetworkSettingsTag</tagclass>
<bodycontent>JSP</bodycontent>
<attribute>
<name>networkSettings</name>
<required>true</required>
<rtexprvalue>true</rtexprvalue>
</attribute>
</tag>

this class returns SKIP_BODY or EVAL_BODY_INCLUDE depending on the value passed to the tag.

Can you please give me the link to page confirming the fact that Tomcat5.5.27 onwards quotes are checked strictly..
i'll be very helpful.

i solved this issue.. ......!!!

-Dorg.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false

after this setting this problem got resolved.
by default strict quote checking was enabled..disabling that solved this issue

Why not fix the underlying issue rather than allowing Tomcat to break the JSP specification?

my application has arround 2500 JSP pages.. so it is almost impossible to correct all the JSPs.

Hope you never deploy on something that doesn't allow broken JSP pages, then.

kamlendra kumar wrote:my application has arround 2500 JSP pages.. so it is almost impossible to correct all the JSPs.

Wow. Just wow.

So the bigger a web app gets, the less quality matters?

Bear Bibeault wrote:
Wow. Just wow.

So the bigger a web app gets, the less quality matters?

Thats absolutely right. For a mere 150+ pages i felt completely drowned by modifying a simple thing....

I didnt even think about getting into 2500 pages...

Due to security vulnerability we are migrating to Tomcat5.5. Quality always matters friend.
But due to this issue not a single jsp page was getting rendered.And checking and correcting 2500 jsp pages gonna take tremendous efforts..
so i guess the way i found works best for my application.

Hello,
i have got same problem with you.
I use TOMCAT 6, ECLIPSE

And i did not know how and where i need add the line "-Dorg.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false "

Please Help me.

Hey!
Set the parameter in catalina.bat

.

Hello thanks for answer,
i try this
i add this line in catalina.bat

But it doesn't work

Thanks for help

check this out http://tomcat.apache.org/tomcat-6.0-doc/config/systemprops.html

Yes i already go this page :s
The line i added is correct???

Sorry for my english i'm from france.

kadavul seelan wrote:Hello thanks for answer,
i try this
i add this line in catalina.bat
set JAVA_OPTS=%JAVA_OPTS% -Dorg.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false

But it doesn't work

Thanks for help

Actually, if you create a file named "setenv.bat" (or setenv.sh) and put the line in there, catalina.bat will pick up the configuration option from there and you won't have to modify the Tomcat startup script. setenv goes in the TOMCAT_HOME/bin directory just like the catalina.bat file.

i resolved my problem, eclipse HELIOS create in workspace a folder server, on this folder it saved catalina.properties files
on this file i add "org.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false" in this file and my project work.

Thanks

You just add the below line in a path of tomcat\conf\catalina.properties
org.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false to the end of ${catalina.home}\conf\catalina.properties
That should be work.