In Grails (<2.3), if I leave grails.views.default.code=\'none\' in the grails Config.groovy, it\'s up to me to HTML encode my expressions explicitly in the G
grails.views.default.code=\'none\'
From GRAILS-1827, it looks like you can override the default codec for a specific page with
<%@ defaultCodec="HTML" %>
or
<%@page defaultCodec="HTML" %>
in some versions (see the referenced issue).