|
|
@@ -25,23 +25,27 @@ public class TscHtmlCharacterEscapes extends CharacterEscapes {
|
|
|
asciiEscapes = CharacterEscapes.standardAsciiEscapesForJSON();
|
|
|
asciiEscapes['<'] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
asciiEscapes['>'] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
- asciiEscapes['&'] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
- asciiEscapes['\"'] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
+// asciiEscapes['&'] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
+// asciiEscapes['\"'] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
// asciiEscapes['('] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
// asciiEscapes[')'] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
// asciiEscapes['#'] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
- asciiEscapes['\''] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
+// asciiEscapes['\''] = CharacterEscapes.ESCAPE_CUSTOM;
|
|
|
|
|
|
Map<CharSequence, CharSequence> lookupMap = new HashMap<>();
|
|
|
- lookupMap.put("(", "(");
|
|
|
- lookupMap.put(")", ")");
|
|
|
- lookupMap.put("#", "#");
|
|
|
- lookupMap.put("\\", "'");
|
|
|
+// lookupMap.put("(", "(");
|
|
|
+// lookupMap.put(")", ")");
|
|
|
+// lookupMap.put("#", "#");
|
|
|
+// lookupMap.put("\\", "'");
|
|
|
+// lookupMap.put("\"", """);
|
|
|
+// lookupMap.put("&", "&");
|
|
|
+ lookupMap.put("<", "<");
|
|
|
+ lookupMap.put(">", ">");
|
|
|
Map<CharSequence, CharSequence> CUSTOM_ESCAPE = Collections.unmodifiableMap(lookupMap);
|
|
|
|
|
|
// XSS 방지 처리 특수문자 인코딩 값 지정
|
|
|
this.translator = new AggregateTranslator(
|
|
|
- new LookupTranslator(EntityArrays.BASIC_ESCAPE), // <, >, &, "는 여기에 포함
|
|
|
+// new LookupTranslator(EntityArrays.BASIC_ESCAPE), // <, >, &, "는 여기에 포함
|
|
|
new LookupTranslator(EntityArrays.ISO8859_1_ESCAPE),
|
|
|
new LookupTranslator(EntityArrays.HTML40_EXTENDED_ESCAPE),
|
|
|
new LookupTranslator(CUSTOM_ESCAPE));
|