tag | 3ad1a7b6b7d3950787468882bc17025750799e92 | |
---|---|---|
tagger | The Android Open Source Project <initial-contribution@android.com> | Wed Oct 04 23:20:34 2023 -0700 |
object | c810b4d0251f5bbbceab6931b47bd91550ac6b23 |
frc_340819020 (10612203,com.google.android.ipsec,com.google.android.networkstack,com.google.android.tethering)
commit | c810b4d0251f5bbbceab6931b47bd91550ac6b23 | [log] [tgz] |
---|---|---|
author | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Tue Apr 11 17:53:48 2023 +0000 |
committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Tue Apr 11 17:53:48 2023 +0000 |
tree | dffefd0374f7ed3358f3a252c2e2aafba60b76be | |
parent | 6cdbceb8d0e1c85489a54e2f1b57f89dddb8699e [diff] | |
parent | 3258d98fad6765651b98863d80a0660dd4233309 [diff] |
Snap for 9912757 from 3258d98fad6765651b98863d80a0660dd4233309 to aml-frc-release Change-Id: I1488aae8d50d443545dc39bb3e19f7eb7bdb75b4
Contextual Output Encoding is a computer programming technique necessary to stop Cross-Site Scripting. This project is a Java 1.5+ simple-to-use drop-in high-performance encoder class with little baggage.
For more detailed documentation on the OWASP Javca Encoder please visit https://owasp.org/www-project-java-encoder/.
You can download a JAR from Maven Central.
JSP tags and EL functions are available in the encoder-jsp, also available in Central.
The jars are also available in Maven:
<dependency> <groupId>org.owasp.encoder</groupId> <artifactId>encoder</artifactId> <version>1.2.3</version> </dependency> <dependency> <groupId>org.owasp.encoder</groupId> <artifactId>encoder-jsp</artifactId> <version>1.2.3</version> </dependency>
The OWASP Java Encoder library is intended for quick contextual encoding with very little overhead, either in performance or usage. To get started, simply add the encoder-1.2.3.jar, import org.owasp.encoder.Encode and start using.
Example usage:
PrintWriter out = ....; out.println("<textarea>"+Encode.forHtml(userData)+"</textarea>");
Please look at the javadoc for Encode to see the variety of contexts for which you can encode.
Happy Encoding!
The team is happy to announce that version 1.2.3 has been released!
The team is happy to announce that version 1.2.2 has been released!
The team is happy to announce that version 1.2.1 has been released!
OWASP Java Encoder has been moved to GitHub. Version 1.2 was also released!
Please visit https://www.owasp.org/index.php/OWASP_Java_Encoder_Project#tab=Use_the_Java_Encoder_Project to see detailed documentation and examples on each API use!
We're happy to announce that version 1.1.1 has been released. Along with a important bug fix, we added ESAPI integration to replace the legacy ESAPI encoders with the OWASP Java Encoder.
We're happy to announce that version 1.1 has been released. Along with a few minor encoding enhancements, we improved performance, and added a JSP tag and function library.