Kevin W. Wall

Just a thought...Does the OWASP Java Encoder Project already handle this? If so, maybe we can steal some code from them. (They also are licensed under the New BSD License.)...

@xeno6696 - Tell you what. I'll give you the weekend off to work on it! 😂

@xeno6696 - Note when you extend the various codecs to handle Unicode, there is a Javadoc comment in the `Encoder.canonicalize(String input, boolean restrictMultiple, boolean restrictMixed)` interface that states: | Note...

Tell me how to rewrite that sentence & I'll revise it. I have lots of other Javadoc revisions to Encoder so it will save you a merge conflict. I'm fixing...

That's okay, Matt. We're all volunteers here. Anyone who needs urgently could help by submitting a PR that includes suitable tests and we will do a code review on it...

I'm in. That's been on my TODO list for a while, but I never can seem to find the time because of other more pressing ESAPI issues, like people not...

Thanks. I don't suppose you have any editable version of this or know who has one. -kevin On Thu, Jul 21, 2022, 5:43 PM Jeff Williams ***@***.***> wrote: > Not...

My preference is to put this and things like it under a separate 'contrib' area. Any suggestions where we should put something like that? For comparison, see https://code.google.com/p/owasp-esapi-java/source/browse/contrib. I would...

Note that one major reason that I don't want to pull this in with the main ESAPI/esapi-java-legacy stuff is because it adds more dependencies (e.g., Hamcrest) that are not used...

Maybe not; but throughout close to 125 or so secure code reviews, I only recall seeing it being used once! -kevin On Mon, Jul 24, 2017 at 9:28 PM, Matt...