Prev Next

Spring / Spring Interview questions II

How do I prevent XSS attack at JSP HTML form?

There are three easy ways.

To implement the HTML escape at the entire application level, add the following at the web.xml.

<context-param>
    <param-name>defaultHtmlEscape</param-name>
    <param-value>true</param-value>
</context-param>

For all forms on a given JSP page,

<spring:htmlEscape defaultHtmlEscape="true" />

For each form: 

<form:input path="formFieldName" htmlEscape="true" />

More Related questions...

Differentiate commandName and modelAttribute. Can I make a path variable optional? Difference between @Inject and @Autowired in Spring Framework. How can JDBC be used more efficiently in the Spring framework? How do I prevent XSS attack at JSP HTML form? What are the advantage of form:label tag in Spring? Where do I place the robots.txt or sitemap.xml or any other file in my web application? Recommended method for escaping HTML using Java. Difference between @Controller and @RestController annotation in Spring MVC. How to retrieve Session Object In Spring MVC? What are the RequestMapping Variants in Spring MVC framework? How do I implement caching in Spring framework? Can a bean class with private constructor be instantiated in Spring framework? Difference between spring singleton bean and the Gang of Four singleton pattern in Java. How do we inject a null or empty Value in Spring framework? What are the different types of events in spring framework? Difference between FileSystemResource and ClassPathResource in Spring framework. Name some of the design patterns used in Spring Framework. Difference between @Bean and @Component annotations in Spring. How do you integrate spring into your Java application? How do I get ServletContext and ServletConfig object in a Spring Bean? What are the different types of Listener events in Spring? How do I resolve codes to error messages in Spring validation? Advantages of PropertyEditor in spring. Explain the role of ConverterFactory in spring validation. Explain Validator interface in Spring. What happens when a prototype bean is injected into a singleton bean? How do you read property files using Spring? Difference between ref bean and ref local attribute in Spring. Why is ApplicationContext.getBean considered bad in Spring? How do I remove a spring bean from ApplicationContext? Difference between JDK dynamic proxy and CGLib proxy in Spring. What are the limitations for auto-wiring by the constructor in Spring? Explain @Configurable annotation in Spring. What is the main strategy interface in Spring security? How to logout the session in spring security? How does Prototype scope work in spring? Can you use @Autowired annotation with static field members? Mention the key interface in that abstracts Spring framework transactions. How to load spring beans from the dependency jar in my project? Explain @Configuration annotation in Spring. What is the difference between @Configuration and @Component in spring? Difference between @Bean and @Component annotation in spring. Explain fixedDelay and fixedRate properties in Spring @Scheduled Annotation. What is Spring SSE? Advantages of SSE over Websockets. Advantages of Websockets over SSE.
Show more question and Answers...

Spring batch Interview questions

Comments & Discussions

Interviews Questions

About Javapedia.net

Javapedia.net is for Java and J2EE developers, technologist and college students who prepare of interview. Also this site includes many practical examples.

This site is developed using J2EE technologies by Steve Antony, a senior Developer/lead at one of the logistics based company.

Follow Javapedia updates

contact: javatutorials2016[at]gmail[dot]com

Kindly consider donating for maintaining this website. Thanks.

Copyright © 2026, javapedia.net, all rights reserved. · .

DMCA.com Protection Status