Java 5 HTML escaping To Prevent XSS

后端 未结 3 1691
刺人心
刺人心 2020-12-05 12:19

I\'m looking into some XSS prevention in my Java application.

I currently have custom built routines that will escape any HTML stored in the database for safe displa

3条回答
  •  春和景丽
    2020-12-05 12:47

    not built-in, but check out the owasp esapi filter, it should do what you're looking for and more. It is a great open source security library written by the smart guys&girls at Owasp ("Open Web Application Security Project").

提交回复
热议问题