import org.owasp.esapi.reference.DefaultEncoder; //导入依赖的package包/类
/**
 * Using ESAPI HTML Encoder, encodes the supplied html string.
 * @param html the string to be encoded.
 * @return the encoded string.
 */
private String encodeHtml(String html) {
    Encoder encoder = DefaultEncoder.getInstance();
    String s = encoder.encodeForHTML(html);
    return s;
}
 

import org.owasp.esapi.reference.DefaultEncoder; //导入依赖的package包/类
/**
 * {@inheritDoc}
 */
@Override
public String[] fixParams(final String name, final String url, final String[] params) throws ValidationFailedException {
	checkNotNull(name);
	checkArgument(!name.trim().isEmpty());
	checkNotNull(url);
	checkArgument(!url.trim().isEmpty());
	checkNotNull(params);
	checkArgument(params.length != 0, "PVF-BUG-0003: params should always have at least one value");
	
	final String[] retValues = new String[params.length];

	for (int paramIndex = 0, paramLength = params.length; paramIndex < paramLength; ++paramIndex) {
		final String param = params[paramIndex];
		
		if (param == null) {
			retValues[paramIndex] = null;
		} else {
			final Encoder encoder = DefaultEncoder.getInstance();
			final String canonicalized = encoder.canonicalize(param, false);
			retValues[paramIndex] = canonicalized;
		}
	}
	
	return retValues;
}
 

import org.owasp.esapi.reference.DefaultEncoder; //导入依赖的package包/类
/**
 * {@inheritDoc}
 */
@Override
public String[] fixParams(final String name, final String url, final String[] params) throws ValidationFailedException {
	checkNotNull(name);
	checkArgument(!name.trim().isEmpty());
	checkNotNull(url);
	checkArgument(!url.trim().isEmpty());
	checkNotNull(params);
	checkArgument(params.length != 0, "PVF-BUG-0003: params should always have at least one value");

	for (int paramIndex = 0, paramLength = params.length; paramIndex < paramLength; ++paramIndex) {
		String param = params[paramIndex];

		if (allowBackSlash) {
			param = param.replaceAll("\\\\", "");
		}
		
		if (param != null) {
			final Encoder encoder = DefaultEncoder.getInstance();
			final String canonicalized = encoder.canonicalize(param, false);
			
			if (!canonicalized.equals(param)) {
				throw new ValidationFailedException("PVF-SECURITY-0002: Param was found to already be encoded.\nNAME: " + name + "\nVALUE: " + param + "\nURL: " + url);
			}
		}
	}
	
	return params;
}
 

import org.owasp.esapi.reference.DefaultEncoder; //导入依赖的package包/类
protected String encodeHtml(String html) {
    Encoder encoder = DefaultEncoder.getInstance();
    String s = encoder.encodeForHTML(html);
    System.out.println("Encoded from ["+html+"] to ["+s+"]");
    return s;
}