esapi-java-legacy
esapi-java-legacy copied to clipboard
configuration should allow optional auto-cannonicalization before encoding.
From [email protected] on March 24, 2011 19:05:13
Sometimes it is difficult to know when data has been previously encoded so to avoid double encoding having a decode/cannonicalization step before encoding.
Note:Data may have been triple or quadruple encoded - either maliciously or accidentally.
Note:This needs to be very lean code to minimize performance impact.
Original issue: http://code.google.com/p/owasp-esapi-java/issues/detail?id=216
@kwwall I can't make heads nor tails of what this question is getting at. Albeit, I've used this API for years, neither the title nor the description seem to reflect what I've come to learn about our encoding.