How can I escape special HTML characters in JSP?

escaping, html, java, jsp

Solution

Short answer:

<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
<c:out value="${myString}"/>

there is another option:

<%@taglib uri="http://java.sun.com/jsp/jstl/functions" prefix="fn" %>
${fn:escapeXml(myString)}

Problem

Before I go and create a custom tag or Java method to do it, what is the standard way to escape HTML characters in JSP? I have a String object and I want to display it in the HTML so that it appears to the user as is. For example: ``` String a = "Hello < World"; ``` Would become: ``` Hello &lt; World ```

Original source

Related problems