Re: [jetty-users] Escape HTML in Jetty

[Greg Wilkins <gregw@xxxxxxxxxxx>]

Alex,

note that we don't really represent our libraries as good for content generation, as they are mostly hidden from webapps and only exposed to embedded usage.   But sanitizeXmlString should work for HTML escaping as it does < > " \ and &.   But you'd better check that there are not other characters that need to be encoded for safe HTML injection.

cheers

On 6 March 2018 at 06:01, Alexander Farber <alexander.farber@xxxxxxxxx> wrote:

Good evening,

what would be a method in Jetty to escape HTML characters in a String?

Is StringUtil.sanitizeXmlString() suitable for that?

Thank you

Alex

_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users

--

Greg Wilkins <gregw@xxxxxxxxxxx> CTO http://webtide.com