{"id":56307,"library":"encoder","title":"OWASP Java Encoder","description":"A high-performance contextual encoder library to prevent Cross-Site Scripting (XSS) by encoding untrusted data for HTML, JavaScript, CSS, and URLs.","status":"active","version":"1.4.0","language":"java","source_language":null,"source_url":"https://github.com/owasp/owasp-java-encoder","tags":["security","xss","encoding","owasp"],"install":[{"cmd":"<dependency>\n  <groupId>org.owasp.encoder</groupId>\n  <artifactId>encoder</artifactId>\n  <version>1.4.0</version>\n</dependency>","lang":"xml","label":"Maven"},{"cmd":"implementation 'org.owasp.encoder:encoder:1.4.0'","lang":"groovy","label":"Gradle"}],"dependencies":[],"imports":[{"symbol":"Encode","correct":"org.owasp.encoder.Encode"}],"quickstart":{"code":"import org.owasp.encoder.Encode;\n\npublic class Example {\n    public static void main(String[] args) {\n        String userInput = \"<script>alert('xss')</script>\";\n        String safeHtml = Encode.forHtml(userInput);\n        System.out.println(safeHtml);\n    }\n}","lang":"java","description":"Encodes a user input string for safe inclusion in HTML."},"warnings":[{"fix":"Always match the encoding method to the output context (HTML attribute, JavaScript string, etc.).","message":"Ensure you use the correct encoding method for the context (e.g., forHtml vs forJavaScript) to avoid bypasses.","severity":"gotcha","affected_versions":"*"}],"env_vars":null,"search_vec":"'contextu':8 'cross':14 'cross-sit':13 'css':25 'data':21 'encod':3,9,19,30 'high':6 'high-perform':5 'html':23 'java':2 'javascript':24 'librari':10 'owasp':1,31 'perform':7 'prevent':12 'script':16 'secur':28 'site':15 'untrust':20 'url':27 'xss':17,29","created_at":"2026-06-15T10:30:57.894455+00:00","updated_at":"2026-06-15T10:30:57.894455+00:00","problems":[],"ecosystem":"maven","meta_description":null,"install_score":null,"quickstart_score":null,"quickstart_tag":null,"pypi_latest":null,"cli_name":null,"cli_version":null,"type":"library","homepage":"https://www.owasp.org/index.php/OWASP_Java_Encoder_Project","github":"https://github.com/owasp/owasp-java-encoder","docs":"https://appdoc.app/artifact/org.owasp.encoder/encoder/","changelog":null,"pypi":null,"npm":null,"openapi_spec":null,"status_page":null,"smithery":null,"categories":["other"],"base_url":null,"auth_type":null,"provenance":{"verified_status":null,"verified_at":null,"last_verified":"2026-06-15","next_check":"2026-12-12","install_tag":null}}