Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions docs/en/05-implementation/03-secure-libraries/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,26 @@ which in turn is part of the [Design][sammd] business function.

----

## Additional Secure Libraries

### Java Encoder
Java Encoder is an OWASP library that helps prevent cross-site scripting (XSS)
by safely encoding untrusted data before it is included in application output.

It should be used whenever user-controlled input is rendered in HTML,
JavaScript, URLs, or other browser-facing contexts.

See the OWASP Java Encoder project for details [javaencoder].

### Java HTML Sanitizer
Java HTML Sanitizer is an OWASP library designed to clean untrusted HTML content
by allowing only safe elements and attributes.

It is useful when applications need to accept HTML input from users while
reducing the risk of XSS vulnerabilities.

See the OWASP Java HTML Sanitizer project for details [htmlsanitizer].

The OWASP Developer Guide is a community effort; if there is something that needs changing
then [submit an issue][issue0703] or [edit on GitHub][edit0703].

Expand All @@ -18,3 +38,5 @@ then [submit an issue][issue0703] or [edit on GitHub][edit0703].
[sammd]: https://owaspsamm.org/model/design/
[sammdsa]: https://owaspsamm.org/model/design/secure-architecture/
[sammdsatm]: https://owaspsamm.org/model/design/secure-architecture/stream-b/
[javaencoder]: https://owasp.org/www-project-java-encoder/
[htmlsanitizer]: https://owasp.org/www-project-java-html-sanitizer/