Add forward slash encoding to DefaultEncoder's encodeForLDAP and encodeForDN

According to [1] and [2], the forward slash ('/') character should be encoded for LDAP filters and distinguished names.

[1] https://docs.microsoft.com/en-us/windows/win32/adsi/search-filter-syntax
[2] https://social.technet.microsoft.com/wiki/contents/articles/5312.active-directory-characters-to-escape.aspx

Author: noloader

src/main/java/org/owasp/esapi/reference/DefaultEncoder.java

@@ -305,9 +305,13 @@ public String encodeForLDAP(String input, boolean encodeWildcards) {
         }
         // TODO: replace with LDAP codec
         StringBuilder sb = new StringBuilder();
-        // According to "Special Characters" at [1], the encoder should escape '*', '(', ')', '\', '/', NUL. Also see [2].
+        // According to Microsoft docs [1,2], the forward slash ('/') MUST be escaped.
+        // According to RFC 4513 Section 3 [3], the forward slash (and other characters) MAY be escaped.
+        // Since Microsoft is a MUST, escape forward slash for all implementations. Also see discussion at [4].
         // [1] https://docs.microsoft.com/en-us/windows/win32/adsi/search-filter-syntax
         // [2] https://social.technet.microsoft.com/wiki/contents/articles/5312.active-directory-characters-to-escape.aspx
+        // [3] https://tools.ietf.org/search/rfc4515#section-3
+        // [4] https://lists.openldap.org/hyperkitty/list/[email protected]/thread/3QPDDLO356ONSJM3JUKD7NMPOOIKIQ5T/
         for (int i = 0; i < input.length(); i++) {
             char c = input.charAt(i);
             switch (c) {
@@ -354,9 +358,7 @@ public String encodeForDN(String input) {
         if ((input.length() > 0) && ((input.charAt(0) == ' ') || (input.charAt(0) == '#'))) {
             sb.append('\\'); // add the leading backslash if needed
         }
-        // According to [1] and [2], the encoder should escape forward slash ('/') in DNs.
-        // [1] https://docs.microsoft.com/en-us/windows/win32/adsi/search-filter-syntax
-        // [2] https://social.technet.microsoft.com/wiki/contents/articles/5312.active-directory-characters-to-escape.aspx
+        // See discussion of forward slash ('/') in encodeForLDAP()
         for (int i = 0; i < input.length(); i++) {
             char c = input.charAt(i);
             switch (c) {