To Stop Executing Script Tag in JSF

Question

Hi,
<h:outputText value="<img src='c:\test.gif' width='4' height='8' >" escape="false"/>
If i execute the above line with escape ="false" then the html tag is being executed. and if the escape="true" the tag is being printed.
<h:outputText value="<script> alert("123")</script>" escape="true"/>
If i execute the above tag i dont want the script to be fired and how is it possible to avoid script running over here.
Thanks.

Answer 1

This only works if you don't hardcode the scripts, but passes them through the EL.
E.g.<h:outputText value="#{myBean.script}" escape="true" />
public String getScript() {
    return "<script>alert('foo');</script>";
}