owasp-java-encoder

owasp-java-encoder copied to clipboard

Any plans for a version using Jakarta Servlet 5.0?

4

We are currently migrating our Spring Boot application to version 3.0. In [Spring Boot 3.0 they've migrated all dependencies from Java EE to Jakarta EE APIs](https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-3.0-Migration-Guide#jakarta-ee). Now Jakarta EE 10...

mlemmens

Add an XML 1.1 encoder

1

The current `toXML` method escapes for XML 1.0. Specifically the difference is that XML1.1 allows all characters `[#x1-#x1F]`, whereas XML 1.0 only allows some of these. As an aside, the...

paul-redwood

Improve Encode.forHtmlAttribute docs

1

See issue #71.

meeque

Confusing example in Encode.forHtmlAttribute docs

2

Currently the `Encode.forHtmlAttribute` JavaDocs contain [this JSP example](/OWASP/owasp-java-encoder/blob/main/core/src/main/java/org/owasp/encoder/Encode.java#L246): ``` ``` I guess this may be secure, but imho it does not reflect the intention of this method. How about using...

meeque