⚡︎ BoxLang Module: ESAPI & Antisamy Module

|:------------------------------------------------------:  |
| ⚡︎ B o x L a n g ⚡︎
| Dynamic : Modular : Productive
|:------------------------------------------------------:  |

Copyright Since 2023 by Ortus Solutions, Corp
www.boxlang.io | www.ortussolutions.com

 

This module provides ESAPI functionality for stronger, more secure applications. This module is part of the BoxLang project.

BIFs

Encoding

This module contributes the following ESAPI encoding BIFs:

• encodeFor() - see cfdocs.org/encodeFor
• esapiEncode() - see cfdocs.org/esapiEncode
• encodeForSQL() - see cfdocs.org/encodeForSQL
• encodeForCSS() - see cfdocs.org/encodeForCSS
• encodeForDN() - see cfdocs.org/encodeForDN
• encodeForHTML() - see cfdocs.org/encodeForHTML
• encodeForHTMLAttribute() - see cfdocs.org/encodeForHTMLAttribute
• encodeForJavaScript() - see cfdocs.org/encodeForJavaScript
• encodeForLDAP() - see cfdocs.org/encodeForLDAP
• encodeForURL() - see cfdocs.org/encodeForURL
• encodeForXML() - see cfdocs.org/encodeForXML
• encodeForXMLAttribute() - see cfdocs.org/encodeForXMLAttribute
• encodeForXPath() - see cfdocs.org/encodeForXPath

Decoding

This module contributes the following ESAPI decoding BIFs:

• canonicalize() - see cfdocs.org/canonicalize
• decodeFor()
• esapiDecode() - see cfdocs.org/esapiDecode
• decodeForBase64() - see cfdocs.org/decodeForBase64
• decodeForHTML() - see cfdocs.org/decodeForHTML
• decodeForJSON() - see cfdocs.org/decodeForJSON
• decodeFromURL() - see cfdocs.org/decodeFromURL

Other

This module contributes these remaining ESAPI BIFs:

• getSafeHTML() - see cfdocs.org/getSafeHTML
• isSafeHTML() - see cfdocs.org/isSafeHTML
• sanitizeHTML() - see cfdocs.org/sanitizeHTML

Component

This module contains no BoxLang Components.

Examples

Encode user-supplied data in HTML to avoid XSS vulnerabilities:

<bx:output>
	<h2>#encodeForHTML( book.title )#</h2>
	<a href="#encodeForHTMLAttribute( book.goodreadsURL )#">Read on Goodreads</a>
</bx:output>

Ortus Sponsors

BoxLang is a professional open-source project and it is completely funded by the community and Ortus Solutions, Corp. Ortus Patreons get many benefits like a cfcasts account, a FORGEBOX Pro account and so much more. If you are interested in becoming a sponsor, please visit our patronage page: https://patreon.com/ortussolutions

THE DAILY BREAD

"I am the way, and the truth, and the life; no one comes to the Father, but by me (JESUS)" Jn 14:1-12