A C E F H J S U

A

asCssColor(String) - Static method in class com.coverity.security.Filter

asCssColor is useful when you need to insert dynamic data into a CSS color context, e.g.

asCssColor(String, String) - Static method in class com.coverity.security.Filter

Identical to asCssColor, except you can provide your own default value

asCssColor(String) - Static method in class com.coverity.security.FilterEL

asCssColorDefault(String, String) - Static method in class com.coverity.security.FilterEL

asFlexibleURL(String) - Static method in class com.coverity.security.Filter

This function should be semantically identical to the above function with the exception of using a scheme blacklist instead of a scheme whitelist.

asFlexibleURL(String) - Static method in class com.coverity.security.FilterEL

asNumber(String) - Static method in class com.coverity.security.Filter

asNumber is useful for outputting dynamic data as a number in a JavaScript context, e.g.

asNumber(String, String) - Static method in class com.coverity.security.Filter

Identical to asNumber, except you can provide your own default value

asNumber(String) - Static method in class com.coverity.security.FilterEL

asNumberDefault(String, String) - Static method in class com.coverity.security.FilterEL

asURL(String) - Static method in class com.coverity.security.Filter

URL filtering to ensure that the URL is a safe non-relative URL or transforms it to a safe relative URL.

asURL(String) - Static method in class com.coverity.security.FilterEL

C

com.coverity.security - package com.coverity.security

cssString(String) - Static method in class com.coverity.security.Escape

CSS String escaper.

cssStringEscape(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for cssString(String)

E

Escape - Class in com.coverity.security

Escape is a small set of methods for escaping tainted data.

Escape() - Constructor for class com.coverity.security.Escape

EscapeEL - Class in com.coverity.security

EscapeEL is a wrapper class the provides alternative names for the escaping methods in com.coverity.security.Escape.

EscapeEL() - Constructor for class com.coverity.security.EscapeEL

F

Filter - Class in com.coverity.security

Filter is a small set of methods for filtering tainted data that cannot be escaped.

Filter() - Constructor for class com.coverity.security.Filter

FilterEL - Class in com.coverity.security

FilterEL is a wrapper class the provides alternative names for the filtering methods in com.coverity.security.Filter.

FilterEL() - Constructor for class com.coverity.security.FilterEL

H

html(String) - Static method in class com.coverity.security.Escape

HTML entity escaping for text content and attributes.

htmlEscape(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for html(String)

htmlText(String) - Static method in class com.coverity.security.Escape

Faster HTML entity escaping for tag content or quoted attributes values only.

htmlText(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for htmlText(String), equivalent to fn:escapeXml.

J

jsRegex(String) - Static method in class com.coverity.security.Escape

JavaScript regex content escaper.

jsRegexEscape(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for jsRegex(String)

jsString(String) - Static method in class com.coverity.security.Escape

JavaScript String Unicode escaper.

jsStringEscape(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for jsString(String)

S

sqlLikeClause(String) - Static method in class com.coverity.security.Escape

SQL LIKE clause escaper.

sqlLikeClause(String, char) - Static method in class com.coverity.security.Escape

SQL LIKE clause escaper.

U

uri(String) - Static method in class com.coverity.security.Escape

Same as uriParam(String) for now.

uriEncode(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for uri(String)

uriParam(String) - Static method in class com.coverity.security.Escape

URI encoder.

uriParamEncode(String) - Static method in class com.coverity.security.EscapeEL

EL wrapper for uriParam(String)

A C E F H J S U