public final class EscapeChars extends Object
To keep you safe by default, WEB4J goes to some effort to escape characters in your data when appropriate, such that you usually don't need to think too much about escaping special characters. Thus, you shouldn't need to directly use the services of this class very often.
For Model Objects containing free form user input, it is highly recommended that you use
SafeText, not String. Free form user input is open to malicious use, such as Cross Site Scripting attacks. Using SafeText
will protect you from such attacks, by always escaping special characters automatically in its toString()
method.
The following WEB4J classes will automatically escape special characters for you, when needed :
SafeText class, used as a building block class for your application's Model Objects, for modeling all
free form user input
Populate tag used with forms
Report class used for creating quick reports
Text, TextFlow, and Tooltips custom tags used for translation
| Modifier and Type | Method and Description |
|---|---|
static String |
forHrefAmpersand(String aURL)
Escape all ampersand characters in a URL.
|
static String |
forHTML(String aText)
Escape characters for text appearing in HTML markup.
|
static String |
forJSON(String aText)
Escapes characters for text appearing as data in the Javascript Object
Notation (JSON) data interchange format.
|
static String |
forRegex(String aRegexFragment)
Replace characters having special meaning in regular expressions with their escaped equivalents, preceded by a
'\' character.
|
static String |
forReplacementString(String aInput)
Escape '$' and '\' characters in replacement strings.
|
static String |
forScriptTagsOnly(String aText)
Disable all
Copyright © 2014 Overture Tool Project. All Rights Reserved. |