Skip to content

Conversation

@kwwall
Copy link
Contributor

@kwwall kwwall commented Sep 14, 2021

Close issue #51

This is the result of my testing some of the Encode static methods from a new Clojure wrapper library that I plan to soon be releasing. There are no actual code changes here.

Note that places like forCssString(String) where it said that '(' and ')' were encoded, but they are not. There are also other places (e.g., forUriComponent(String)) where it said a character was NOT encoded (e.g., '@' for the case just mentioned), but it was. I will leave it up to you if you wish to adjust any of your JUnit tests.

Lastly, there were a few minor additions that I consider as improvements, especially to novices, such as a reference to the Cross-Site Scripting Prevention Cheat Sheet, adding cross-reference links in a few places, etc.

@jmanico jmanico merged commit 2565c49 into OWASP:main Sep 14, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants