info.magnolia.util
Class EscapeUtil

java.lang.Object
  info.magnolia.util.EscapeUtil

public class EscapeUtil
extends Object

Utilities to escaping characters for preventing XSS attack.

This class escapes only & (&), "("), <(<), >(>) characters, but doesn't escape others characters.

Use when StringEscapeUtils cannot be used because of escaping more or less character entities.

Constructor Summary

EscapeUtil()

Method Summary

static String	escapeXss(String str)
static String[]	escapeXss(String[] str)
static String	unescapeXss(String str)
static String[]	unescapeXss(String[] str)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EscapeUtil

public EscapeUtil()

Method Detail

escapeXss

public static String escapeXss(String str)

escapeXss

public static String[] escapeXss(String[] str)

unescapeXss

public static String unescapeXss(String str)

unescapeXss

public static String[] unescapeXss(String[] str)