Examples of SafeHtml

An object that implements this interface encapsulates HTML that is guaranteed to be safe to use (with respect to potential Cross-Site-Scripting vulnerabilities) in an HTML context.

All implementing classes must maintain the class invariant (by design and implementation and/or convention of use), that invoking {@link #asString()} on any instance will return a stringthat is safe to assign to the {@code .innerHTML} DOM property in a browser (or to use similarlyin an "inner HTML" context), in the sense that doing so must not cause execution of script in the browser.

Implementations of this interface must not implement {@link com.google.gwt.user.client.rpc.IsSerializable}, since deserialization can result in violation of the class invariant.

    return "org.waveprotocol.wave.client.wavepanel.event.Tests";
  }


  @Override
  protected void gwtSetUp() {
    SafeHtml dom = EscapeUtils.fromSafeConstant("" + // \u2620
        "<div id='base' kind='base'>" + // \u2620
        "  <div>" + // \u2620
        "    <div kind='foo' id='foo'>" + // \u2620
        "      <div kind='unused'>" + // \u2620
        "        <div kind='bar' id='bar'>" + // \u2620

   * @param style
   */
  public static void image(
      SafeHtmlBuilder builder, String id, String style, SafeHtml url, SafeHtml info, String kind) {
    String safeUrl = url != null ? EscapeUtils.sanitizeUri(url.asString()) : null;
    SafeHtml img = EscapeUtils.fromSafeConstant("<img " //
        + "id='" + id + "' " //
        + "class='" + style + "' " //
        + (safeUrl != null ? "src='" + safeUrl + "' " : "") //
        + (info != null ? " alt='" + info.asString() + "' title='" + info.asString() + "' " : "") //
        + (kind != null ? " " + KIND_ATTRIBUTE + "='" + kind + "'" : "") //

    }
    return option;
  }


  public static SafeHtml getMenuOptionId(MenuOption option) {
    SafeHtml code = MENU_CODES.get(option);
    if (code == null) {
      throw new IllegalArgumentException("No such option: " + option);
    }
    return code;
  }

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.

Examples of SafeHtml

Examples of org.waveprotocol.wave.client.common.safehtml.SafeHtml

Examples of org.waveprotocol.wave.client.common.safehtml.SafeHtml

Examples of org.waveprotocol.wave.client.common.safehtml.SafeHtml