sapphire.util

Class SafeHTML

java.lang.Object

sapphire.util.SafeHTML

public class SafeHTML
extends java.lang.Object

Class used to encode un-trusted content to be inserted into HTML or javascript to prevent XSS attacks

Constructor Summary

Constructors

Constructor and Description
SafeHTML()

Method Summary

Modifier and Type	Method and Description
static java.lang.String	encodeForCSS(java.lang.String input)
static java.lang.String	encodeForHTML(java.lang.String input)
static java.lang.String	encodeForHTML(java.lang.String input, boolean allowBasicFormatTags)
static java.lang.String	encodeForHTMLAttribute(java.lang.String input)
static java.lang.String	encodeForJavaScript(java.lang.String input)
static java.lang.String	encodeForURL(java.lang.String input)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SafeHTML

public SafeHTML()

Method Detail

encodeForJavaScript

public static java.lang.String encodeForJavaScript(java.lang.String input)

encodeForHTMLAttribute

public static java.lang.String encodeForHTMLAttribute(java.lang.String input)

encodeForHTML

public static java.lang.String encodeForHTML(java.lang.String input)

encodeForHTML

public static java.lang.String encodeForHTML(java.lang.String input,
                                             boolean allowBasicFormatTags)

encodeForURL

public static java.lang.String encodeForURL(java.lang.String input)
                                     throws java.lang.Exception

Throws:

java.lang.Exception

encodeForCSS

public static java.lang.String encodeForCSS(java.lang.String input)