JSP send string parameter that has html content

Question

I am trying to pass a string parameter that has html content in it.

<%
String myparam = "<td>some text</td>";
%>
<td>
<a href="page.jsp?myparam=<%=myparam%>">Visit W3Schools</a>
</td

It fails to send and recognizes my string as html code.

try like this <a href=<%= "page.jsp?myparam="<%=myparam%>"" %> >Visit</a> — soorapadman
– soorapadman, Commented Nov 9, 2017 at 13:46

Joop Eggen · Accepted Answer · 2017-11-09 14:04:56Z

1

To turn a text into URL passable parameters, and to have no HTML <, > inside of the HTML attribute, do:

String myparam = URLEncoder.encode("<td>some text</td>", "UTF-8");

At the top of the JSP you maybe have to import java.net.URLEncoder.

<%@ page import="java.net.URLEncoder" %>

answered Nov 9, 2017 at 14:04

Joop Eggen

110k8 gold badges89 silver badges142 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Franz Deschler · Accepted Answer · 2017-11-09 13:40:54Z

1

This should be indeed possible. To insert the value of a variable, use

<%= %>

like this:

<a href="page.jsp?myparam=<%=myparam%>">Visit W3Schools</a>

But sending html inside a url is not a good idea. It´s easy to manipulate and you will get security issues due to code injection.

And if you really really need to send html in the url, you need to escape the html specific characters.

answered Nov 9, 2017 at 13:40

Franz Deschler

2,5945 gold badges28 silver badges44 bronze badges

I had placed the equal sign just left it out by mistake. Still does not work with edit. If its not possible then i will look for another way