package org.owasp.webgoat.util; import java.util.HashMap; import java.util.Map; public class HtmlEncoder { static Map e2i = new HashMap(); static Map i2e = new HashMap(); // html entity list private static Object[][] entities = { {"quot", new Integer( 34 )}, // " - double-quote {"amp", new Integer( 38 )}, // & - ampersand {"lt", new Integer( 60 )}, // < - less-than {"gt", new Integer( 62 )}, // > - greater-than {"nbsp", new Integer( 160 )}, // non-breaking space {"copy", new Integer( 169 )}, // © - copyright {"reg", new Integer( 174 )}, // ® - registered trademark {"Agrave", new Integer( 192 )}, // À - uppercase A, grave accent {"Aacute", new Integer( 193 )}, // Á - uppercase A, acute accent {"Acirc", new Integer( 194 )}, // Â - uppercase A, circumflex accent {"Atilde", new Integer( 195 )}, // Ã - uppercase A, tilde {"Auml", new Integer( 196 )}, // Ä - uppercase A, umlaut {"Aring", new Integer( 197 )}, // Å - uppercase A, ring {"AElig", new Integer( 198 )}, // Æ - uppercase AE {"Ccedil", new Integer( 199 )}, // Ç - uppercase C, cedilla {"Egrave", new Integer( 200 )}, // È - uppercase E, grave accent {"Eacute", new Integer( 201 )}, // É - uppercase E, acute accent {"Ecirc", new Integer( 202 )}, // Ê - uppercase E, circumflex accent {"Euml", new Integer( 203 )}, // Ë - uppercase E, umlaut {"Igrave", new Integer( 204 )}, // Ì - uppercase I, grave accent {"Iacute", new Integer( 205 )}, // Í - uppercase I, acute accent {"Icirc", new Integer( 206 )}, // Î - uppercase I, circumflex accent {"Iuml", new Integer( 207 )}, // Ï - uppercase I, umlaut {"ETH", new Integer( 208 )}, // Ð - uppercase Eth, Icelandic {"Ntilde", new Integer( 209 )}, // Ñ - uppercase N, tilde {"Ograve", new Integer( 210 )}, // Ò - uppercase O, grave accent {"Oacute", new Integer( 211 )}, // Ó - uppercase O, acute accent {"Ocirc", new Integer( 212 )}, // Ô - uppercase O, circumflex accent {"Otilde", new Integer( 213 )}, // Õ - uppercase O, tilde {"Ouml", new Integer( 214 )}, // Ö - uppercase O, umlaut {"Oslash", new Integer( 216 )}, // Ø - uppercase O, slash {"Ugrave", new Integer( 217 )}, // Ù - uppercase U, grave accent {"Uacute", new Integer( 218 )}, // Ú - uppercase U, acute accent {"Ucirc", new Integer( 219 )}, // Û - uppercase U, circumflex accent {"Uuml", new Integer( 220 )}, // Ü - uppercase U, umlaut {"Yacute", new Integer( 221 )}, // Ý - uppercase Y, acute accent {"THORN", new Integer( 222 )}, // Þ - uppercase THORN, Icelandic {"szlig", new Integer( 223 )}, // ß - lowercase sharps, German {"agrave", new Integer( 224 )}, // à - lowercase a, grave accent {"aacute", new Integer( 225 )}, // á - lowercase a, acute accent {"acirc", new Integer( 226 )}, // â - lowercase a, circumflex accent {"atilde", new Integer( 227 )}, // ã - lowercase a, tilde {"auml", new Integer( 228 )}, // ä - lowercase a, umlaut {"aring", new Integer( 229 )}, // å - lowercase a, ring {"aelig", new Integer( 230 )}, // æ - lowercase ae {"ccedil", new Integer( 231 )}, // ç - lowercase c, cedilla {"egrave", new Integer( 232 )}, // è - lowercase e, grave accent {"eacute", new Integer( 233 )}, // é - lowercase e, acute accent {"ecirc", new Integer( 234 )}, // ê - lowercase e, circumflex accent {"euml", new Integer( 235 )}, // ë - lowercase e, umlaut {"igrave", new Integer( 236 )}, // ì - lowercase i, grave accent {"iacute", new Integer( 237 )}, // í - lowercase i, acute accent {"icirc", new Integer( 238 )}, // î - lowercase i, circumflex accent {"iuml", new Integer( 239 )}, // ï - lowercase i, umlaut {"igrave", new Integer( 236 )}, // ì - lowercase i, grave accent {"iacute", new Integer( 237 )}, // í - lowercase i, acute accent {"icirc", new Integer( 238 )}, // î - lowercase i, circumflex accent {"iuml", new Integer( 239 )}, // ï - lowercase i, umlaut {"eth", new Integer( 240 )}, // ð - lowercase eth, Icelandic {"ntilde", new Integer( 241 )}, // ñ - lowercase n, tilde {"ograve", new Integer( 242 )}, // ò - lowercase o, grave accent {"oacute", new Integer( 243 )}, // ó - lowercase o, acute accent {"ocirc", new Integer( 244 )}, // ô - lowercase o, circumflex accent {"otilde", new Integer( 245 )}, // õ - lowercase o, tilde {"ouml", new Integer( 246 )}, // ö - lowercase o, umlaut {"oslash", new Integer( 248 )}, // ø - lowercase o, slash {"ugrave", new Integer( 249 )}, // ù - lowercase u, grave accent {"uacute", new Integer( 250 )}, // ú - lowercase u, acute accent {"ucirc", new Integer( 251 )}, // û - lowercase u, circumflex accent {"uuml", new Integer( 252 )}, // ü - lowercase u, umlaut {"yacute", new Integer( 253 )}, // ý - lowercase y, acute accent {"thorn", new Integer( 254 )}, // þ - lowercase thorn, Icelandic {"yuml", new Integer( 255 )}, // ÿ - lowercase y, umlaut {"euro", new Integer( 8364 )},// Euro symbol }; public HtmlEncoder() { for(int i=0; i * * e.g. "bread" & "butter" => &quot;bread&quot; &amp; * &quot;butter&quot; . Update: supports nearly all HTML entities, including funky * accents. See the source code for more detail. Adapted from * http://www.purpletech.com/code/src/com/purpletech/util/Utils.java. * * @param s1 Description of the Parameter * @return Description of the Return Value */ public static String encode( String s1 ) { StringBuffer buf = new StringBuffer(); int i; for ( i = 0; i < s1.length(); ++i ) { char ch = s1.charAt( i ); String entity = (String) i2e.get( new Integer( (int) ch ) ); if ( entity == null ) { if ( ( (int) ch ) > 128 ) { buf.append( "&#" + ( (int) ch ) + ";" ); } else { buf.append( ch ); } } else { buf.append( "&" + entity + ";" ); } } return buf.toString(); } /** * Given a string containing entity escapes, returns a string containing the actual Unicode * characters corresponding to the escapes. Adapted from * http://www.purpletech.com/code/src/com/purpletech/util/Utils.java. * * @param s1 Description of the Parameter * @return Description of the Return Value */ public static String decode( String s1 ) { StringBuffer buf = new StringBuffer(); int i; for ( i = 0; i < s1.length(); ++i ) { char ch = s1.charAt( i ); if ( ch == '&' ) { int semi = s1.indexOf( ';', i + 1 ); if ( semi == -1 ) { buf.append( ch ); continue; } String entity = s1.substring( i + 1, semi ); Integer iso; if ( entity.charAt( 0 ) == '#' ) { iso = new Integer( entity.substring( 1 ) ); } else { iso = (Integer) e2i.get( entity ); } if ( iso == null ) { buf.append( "&" + entity + ";" ); } else { buf.append( (char) ( iso.intValue() ) ); } i = semi; } else { buf.append( ch ); } } return buf.toString(); } }