Skip to main content


Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » BIRT » JSTL tags inside rptdesign file(Is it possible to integrate JSTL in to birt rptdesign file)
JSTL tags inside rptdesign file [message #1786659] Wed, 09 May 2018 05:45
Nithya Ranadeerage is currently offline Nithya RanadeerageFriend
Messages: 1
Registered: May 2018
Junior Member
Hi,

We have a very old project which uses Birt 2.3.1. And one of the issues we have come across is that we load the report file using an iframe and the parameters for the report is passed in the URL.
So someone can change this URL parameters to execute a javascript function when loading the report. (Cross site scripting - XSS).
Inorder to avoid that what I'm trying to do is to use JSTL to access the URL parameters which will stop executing javascript code on the report file.
To do that I added the jstl jar to my reporting web application lib folder and added the jstl namespace to the rptdesign file and accessed the URL parameters as following.

<expression name="valueExpr"><c:out value="params['week'].value"/>+" of "+ <c:out value="params['year'].value"/></expression>


JSTL namespace is added as following in the header of rptdesign file.

<report xmlns="http://www.eclipse.org/birt/2005/design" version="3.2.17" id="1"
xmlns:c="<jstl url>"
xsi:schemaLocation="<jstl url>">

But when loading the report it is complaining with the following error

Error Code:Error.XMLParserException.UNKNOWN_TAG Message:The XML file contains an unsupported element.
and the report is not found.

* Can not post the jstl url since only eclipse.org is allowed

Anyhelp would be appreciated.


Previous Topic:RunTask+RenderTask vs. RunAndRenderTask
Next Topic:BIRT charts do not work on redhat
Goto Forum:
  


Current Time: Wed Sep 19 01:41:19 GMT 2018

Powered by FUDForum. Page generated in 0.03480 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top