A C E F H J S U

A

asCssColor(String) - Static method in class com.coverity.security.Filter

asCssColor is useful when you need to insert dynamic data into a CSS color context, e.g.

asCssColor(String, String) - Static method in class com.coverity.security.Filter

Identical to asCssColor, except you can provide your own default value

asCssColor(String) - Static method in class com.coverity.security.FilterEL

asCssColorDefault(String, String) - Static method in class com.coverity.security.FilterEL

asFlexibleURL(String) - Static method in class com.coverity.security.Filter

This function should be semantically identical to the above function with the exception of using a scheme blacklist instead of a scheme whitelist.

asFlexibleURL(String) - Static method in class com.coverity.security.FilterEL

asNumber(String) - Static method in class com.coverity.security.Filter

asNumber is useful for outputting dynamic data as a number in a JavaScript context, e.g.

asNumber(String, String) - Static method in class com.coverity.security.Filter

Identical to asNumber, except you can provide your own default value

asNumber(String) - Static method in class com.coverity.security.FilterEL

asNumberDefault(String, String) - Static method in class com.coverity.security.FilterEL

asURL(String) - Static method in class com.coverity.security.Filter

URL filtering to ensure that the URL is a safe non-relative URL or transforms it to a safe relative URL.

asURL(String) - Static method in class com.coverity.security.FilterEL

C

com.coverity.security - package com.coverity.security

cssString(String) - Static method in class com.coverity.security.Escape

CSS String escaper.

cssStringEscape(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for Escape.cssString(String)

E

Escape - Class in com.coverity.security

Escape is a small set of methods for escaping tainted data.

Escape() - Constructor for class com.coverity.security.Escape

EscapeEL - Class in com.coverity.security

EscapeEL is a wrapper class the provides alternative names for the escaping methods in com.coverity.security.Escape.

EscapeEL() - Constructor for class com.coverity.security.EscapeEL

F

Filter - Class in com.coverity.security

Filter() - Constructor for class com.coverity.security.Filter

FilterEL - Class in com.coverity.security

FilterEL() - Constructor for class com.coverity.security.FilterEL

H

html(String) - Static method in class com.coverity.security.Escape

HTML entity escaping for text content and attributes.

htmlEscape(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for Escape.html(String)

htmlText(String) - Static method in class com.coverity.security.Escape

Faster HTML entity escaping for tag content or quoted attributes values only.

htmlText(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for Escape.htmlText(String), equivalent to fn:escapeXml.

J

jsRegex(String) - Static method in class com.coverity.security.Escape

JavaScript regex content escaper.

jsRegexEscape(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for Escape.jsRegex(String)

jsString(String) - Static method in class com.coverity.security.Escape

JavaScript String Unicode escaper.

jsStringEscape(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for Escape.jsString(String)

S

sqlLikeClause(String) - Static method in class com.coverity.security.Escape

SQL LIKE clause escaper.

sqlLikeClause(String, char) - Static method in class com.coverity.security.Escape

SQL LIKE clause escaper.

U

uri(String) - Static method in class com.coverity.security.Escape

Same as Escape.uriParam(String) for now.

uriEncode(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for Escape.uri(String)

uriParam(String) - Static method in class com.coverity.security.Escape

URI encoder.

uriParamEncode(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for Escape.uriParam(String)

A C E F H J S U