Solved

Integrating Verisign Secure Seal supplied html into XHTML Seam/JSF application

Posted on 2008-06-25
2
1,161 Views
Last Modified: 2013-12-02
I have a JBoss Seam application that serves up SSL pages to a secure site.  The application uses XHTML/JSF.  I don't think Seam is relevant for my question.

Our SSL certificate is provided by Verisign - and they provide a 'secured by verisign' html fragment to include in your site that allows user to click-through to check that your site is indeed known by verisign.

I am trying to integrate this raw html into a xhtml page within my Jboss Seam application.  (see http://www.verisign.com/ssl/secured-seal) But when the page is rendered on the server it complains about the embedded <script> tag in the supplied html.  

The offending tag is:
<script src="https://seal.verisign.com/getseal?host_name=secure.mobile-sense.com&size=M&use_flash=YES&use_transparent=YES&lang=en"></script>

When the page is rendered within Jboss I get the following error:
javax.servlet.ServletException: Error Parsing /layout/template.xhtml: Error Traced[line: 67] The reference to entity "size" must end with the ';' delimiter.

It looks like the renderer is interpreting the url query parameters as html that needs to be escaped.  I've tried surrounding the code fragment with a jsf verbatim tag <f:verbatim escape="true" (and false) - but still get the same results.

What is wrong the src attribute on the script tag??


0
Comment
Question by:tdsproule
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 42

Accepted Solution

by:
David S. earned 250 total points
ID: 21871450
All "&" must be changed to "&amp;".
0
 

Author Comment

by:tdsproule
ID: 21873587
I had tried that - but that didn't work as well - but I then tried replacing & with &#31; and that worked in my environment.

Anyways - I'm now sorted.

Many thanks for pointing me in the right direction.
0

Featured Post

Get MongoDB database support online, now!

At Percona’s web store you can order your MongoDB database support needs in minutes. No hassles, no fuss, just pick and click. Pay online with a credit card. Handle your MongoDB database support now!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you tried to learn about Unicode, UTF-8, and multibyte text encoding and all the articles are just too "academic" or too technical? This article aims to make the whole topic easy for just about anyone to understand.
Nothing in an HTTP request can be trusted, including HTTP headers and form data.  A form token is a tool that can be used to guard against request forgeries (CSRF).  This article shows an improved approach to form tokens, making it more difficult to…
This tutorial will teach you the core code needed to finalize the addition of a watermark to your image. The viewer will use a small PHP class to learn and create a watermark.
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.
Suggested Courses

635 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question