With the increasing use of Ajax to handle the majority of the data transfer between web pages and the server, there are a number of occasions where the server needs to return a JSON response to the page, which will be intercepted by some Javascript, and parts of that response will be injected into the page as new chunks of HTML for display.

Continue Reading...

A note about an HTML escaping gotcha in JSTL which can lead to XSS security problems.

Continue Reading...