[OWASP-ESAPI] ESAPI JavaScript encoding and spaces?

Jim Manico jim.manico at owasp.org
Wed Apr 1 19:52:32 EDT 2009


Jeff,

 

Why are you encoding spaces in the JavaScript encoding routine?

 

It does not seem necessary in any modern browser, as long as your data is properly quoted during assignment.

 

I would love a configurable version that lets me turn off space encoding for javascript encoding.  But that is just my tactical need - what is the right way overall?



- Jim

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-esapi/attachments/20090401/9599f5d6/attachment.html 


More information about the OWASP-ESAPI mailing list