CharacterEncoder.java

/*
*  Copyright (c) 2015 WSO2 Inc. (http://www.wso2.org) All Rights Reserved.
*
*  WSO2 Inc. licenses this file to you under the Apache License,
*  Version 2.0 (the "License"); you may not use this file except
*  in compliance with the License.
*  You may obtain a copy of the License at
*
*    http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing,
* software distributed under the License is distributed on an
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
* KIND, either express or implied.  See the License for the
* specific language governing permissions and limitations
* under the License.
*/

package org.wso2.carbon.businessprocesses.common.utils;

/*
 * This class validates special characters to avoid any XSS vulnerabilities.
 * This class has to be added due to a known bug in the org.wso2.carbon.businessprocesses.common.utils.CharacterEncoder class
 */

public class CharacterEncoder {

    public static String getSafeText(String text) {
        if (text == null) {
            return text;
        }
        text = text.trim();
        if (text.indexOf('<') > -1) {
            text = text.replace("<", "<");
        }
        if (text.indexOf('>') > -1) {
            text = text.replace(">", ">");
        }
        if(text.contains("\"")){
            text = text.replace("\"", """);
        }
        return text;
    }
}