public class EscapeUtils extends Object
Utility methods contained herein must be used strictly for the appropriate context, e.g. HTML, HTML attribute, JS string.
Method calls are delegated to safe and well-tried whitelisting encoders from owasp-java-encoding.
Modifier and Type | Method and Description |
---|---|
static String |
forCDATA(String input) |
static String |
forCssString(String input) |
static String |
forCssUrl(String input) |
static String |
forHtml(String input) |
static String |
forHtmlAttribute(String input) |
static String |
forHtmlContent(String input) |
static String |
forHtmlUnquotedAttribute(String input) |
static String |
forJava(String input) |
static String |
forJavaScript(String input) |
static String |
forJavaScriptAttribute(String input) |
static String |
forJavaScriptBlock(String input) |
static String |
forJavaScriptSource(String input) |
static String |
forUriComponent(String input) |
static String |
forXml(String input) |
static String |
forXmlAttribute(String input) |
static String |
forXmlComment(String input) |
static String |
forXmlContent(String input) |
static String |
forXmlTag(String intag)
Ensure a valid XMLElement name is returned.
Uses the XMLChar Replaces spaces by underscores, < by .lt, > by .gt. |
public static String forHtmlContent(String input)
Encode.forHtmlContent(String)
public static String forHtmlAttribute(String input)
Encode.forHtmlAttribute(String)
public static String forHtmlUnquotedAttribute(String input)
Encode.forHtmlUnquotedAttribute(String)
public static String forUriComponent(String input)
Encode.forUriComponent(String)
public static String forXmlContent(String input)
Encode.forXmlContent(String)
public static String forXmlAttribute(String input)
Encode.forXmlAttribute(String)
public static String forXmlComment(String input)
Encode.forXmlComment(String)
public static String forJavaScript(String input)
Encode.forJavaScript(String)
public static String forJavaScriptAttribute(String input)
Encode.forJavaScriptAttribute(String)
public static String forJavaScriptBlock(String input)
Encode.forJavaScriptBlock(String)
public static String forJavaScriptSource(String input)
Encode.forJavaScriptSource(String)
public static String forXmlTag(String intag)
XMLChar
Integer
.toHexString()intag
- the source for the element nameCopyright © 2019. All rights reserved.