Handling quotes with ${param.CurrentName}

Question

I've read many posts on this topic, but cannot find a solution that works for my problem. I have 2 JSP pages. JSP 1 has text field CurrentName. JSP2 tries to capture that value and store it:<input type="hidden" name="CurrentName" id="CurrentName" value="${param.CurrentName}"> This of course works great, unless the user types in double quotes, like Joe "Cool" Johnson. If that happens, JSP2 contains <input type="hidden" name="CurrentName" id="CurrentName" value="Joe "Cool" Johnson"> Of course, the real data is cut off after Joe<space> because of the quote around "Cool." If I use single ticks like value='${param.CurrentName}', it works great with double quotes but not with single quotes, like Suzie's Kitchen, as we get the same data cutoff error after Suzie.
So, of course the answer is to encode the value, replacing \" with ". But when I'm using default param and not a bean, I can't do this in a Java POJO. If I try calling a JavaScript method like fixquote(${param.CurrentName}); the result thows an error as fixquote(Joe "Cool" Johnson); If I try to capture the param in a variable first, it also throws an error.String paramname1 = ${param.CurrentName};results in String paramname1 = Joe "Cool" Johnson; and I can't pass paramname1 on the next line because it's already errored. I tried ${fn:replace(${param.CurrentName}, "a", "b")}; and that failed too.
I'm not sure how I can actually pass that data to any method, Java, JSTL or JavaScript, because it translates the real value causing an error before I can pass it. I thought about using a bean from JSP1 to JSP2, but in this application I inherited, there are about 100 parameters on this page I'd need to add, so am hoping to avoid that work.
Thanks.

Answer 1

That last one was the closest to what you need to do. You just had some nested ${ expr } braces which doesn't work so well.
// fixed example
${fn:replace(param.CurrentName, "a", "b")};
// I think it should look something like this
${fn:replace(param.CurrentName, "\"", "\\\"")};Alternatively you could create a class wraps the parameter map, and escapes values for you.
You could then replace all instances of "param" with references to this bean instead.
cheers,
evnafets