OWASP ESAPI 预防XSS跨站脚本攻击_xss攻击引入esapi(1)

public static void main(String[] args) {
String s = ESAPI.encoder().encodeForHTML(“ < script > alert(); </ script >”);
System.out.println(“对html进行转码：”+s);
s = ESAPI.encoder().encodeForSQL(new MySQLCodec(MySQLCodec.Mode.STANDARD),“select * from nihao”);
System.out.println(“对MySQL的SQL转码：”+s);
s = ESAPI.encoder().decodeForHTML(s);
System.out.println(“对html进行解码：”+s);
}