bx-esapi
bx-esapi: OWASP ESAPI Security Module
Installation
install-bx-module bx-esapi
# CommandBox
box install bx-esapi
Encoding BIFs
| BIF | Description |
|---|---|
encodeFor( context, value ) |
Encode for a named context (see list below) |
encodeForHTML( value, [canonicalize] ) |
Encode for HTML body content |
encodeForHTMLAttribute( value, [canonicalize] ) |
Encode for HTML attribute values |
encodeForJavaScript( value, [canonicalize] ) |
Encode for inline JavaScript |
encodeForCSS( value, [canonicalize] ) |
Encode for CSS values |
More from ortus-boxlang/skills
boxlang-functional-programming
Use this skill when working with BoxLang lambdas, closures, arrow functions, higher-order functions, functional array/struct pipelines (map, filter, reduce, flatMap, groupBy, etc.), destructuring, or spread syntax.
13boxlang-classes-and-oop
Use this skill when writing BoxLang classes, components, interfaces, inheritance hierarchies, annotations, properties, constructors, or applying object-oriented design patterns in BoxLang.
12boxlang-best-practices
Use this skill when writing, reviewing, or improving BoxLang code to ensure it follows community best practices for naming, structure, scoping, error handling, performance, and maintainability.
12boxlang-code-reviewer
Use this skill when reviewing BoxLang code for quality, correctness, security vulnerabilities, performance issues, style violations, or when providing structured code review feedback following BoxLang best practices and security guidelines.
12boxlang-configuration
Use this skill when configuring BoxLang runtime settings via boxlang.json, setting environment variables for config overrides, configuring datasources, caches, executors, modules, logging, security, or schedulers — or when helping someone understand the BoxLang configuration system.
11boxlang-web-development
Use this skill when building BoxLang web applications: Application.bx lifecycle, request/response handling, sessions, forms, REST APIs, HTTP clients, routing, CSRF protection, Server-Sent Events, or configuring CommandBox/MiniServer.
11