BTW, maybe I'm using esapi all wrong.  What I'm doing is setting

<cfset application.esapi = CreateObject("java", "org.owasp.esapi.ESAPI") />

in onApplicationStart and then I have a helper that does 

<cfreturn application.esapi.encoder().encodeForHTML(local.strToEncode) />

among other things.  I forget some details but I think I have it this way 
because is ACF9  and ACF10 added encodeForHTML?  I just thought better than 
creating the object each time in helper......



-- 
-- 
Model-Glue Sites:
Home Page: http://www.model-glue.com
Documentation: http://docs.model-glue.com
Bug Tracker: http://bugs.model-glue.com
Blog: http://www.model-glue.com/blog

You received this message because you are subscribed to the Google
Groups "model-glue" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/model-glue?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"model-glue" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to