A E F G H I M O S T U

A

append(boolean) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends the string representation of a boolean.

append(byte) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends the string representation of a number.

append(char) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends the string representation of a char.

append(double) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends the string representation of a number.

append(float) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends the string representation of a number.

append(int) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends the string representation of a number.

append(long) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends the string representation of a number.

append(SafeHtml) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends the contents of another SafeHtml object, without applying HTML-escaping to it.

appendEscaped(String) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends a string after HTML-escaping it.

appendEscapedLines(String) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends a string consisting of several newline-separated lines after HTML-escaping it.

appendHtmlConstant(String) - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Appends a compile-time-constant string, which will not be escaped.

asString() - Method in class org.gwtproject.safehtml.shared.OnlyToBeUsedInGeneratedCodeStringBlessedAsSafeHtml

Returns this object's contained HTML as a string.

asString() - Method in interface org.gwtproject.safehtml.shared.SafeHtml

Returns this object's contained HTML as a string.

asString() - Method in interface org.gwtproject.safehtml.shared.SafeUri

Returns this object's contained URI as a string.

E

EMPTY_SAFE_HTML - Static variable in class org.gwtproject.safehtml.shared.SafeHtmlUtils

An empty String.

encode(String) - Static method in class org.gwtproject.safehtml.shared.UriUtils

Encodes the URL.

encodeAllowEscapes(String) - Static method in class org.gwtproject.safehtml.shared.UriUtils

Encodes the URL, preserving existing %-escapes.

equals(Object) - Method in class org.gwtproject.safehtml.shared.OnlyToBeUsedInGeneratedCodeStringBlessedAsSafeHtml

Compares this string to the specified object.

equals(Object) - Method in interface org.gwtproject.safehtml.shared.SafeHtml

Compares this string to the specified object.

equals(Object) - Method in interface org.gwtproject.safehtml.shared.SafeUri

Compares this string to the specified object.

extractScheme(String) - Static method in class org.gwtproject.safehtml.shared.UriUtils

Extracts the scheme of a URI.

F

FORCE_CHECK_COMPLETE_HTML - Static variable in class org.gwtproject.safehtml.shared.SafeHtmlHostedModeUtils

Name of system property that if set, enables checks in server-side code (even if assertions are disabled).

FORCE_CHECK_VALID_URI - Static variable in class org.gwtproject.safehtml.shared.SafeUriHostedModeUtils

Name of system property that if set, enables checks in server-side code (even if assertions are disabled).

fromSafeConstant(String) - Static method in class org.gwtproject.safehtml.shared.SafeHtmlUtils

Returns a SafeHtml constructed from a safe string, i.e., without escaping the string.

fromSafeConstant(String) - Static method in class org.gwtproject.safehtml.shared.UriUtils

Returns a SafeUri constructed from a value that is fully under the control of the program, e.g., a constant.

fromString(String) - Static method in class org.gwtproject.safehtml.shared.SafeHtmlUtils

Returns a SafeHtml containing the escaped string.

fromString(String) - Static method in class org.gwtproject.safehtml.shared.UriUtils

Returns a SafeUri obtained by sanitizing the provided string.

fromTrustedString(String) - Static method in class org.gwtproject.safehtml.shared.SafeHtmlUtils

Returns a SafeHtml constructed from a trusted string, i.e., without escaping the string.

fromTrustedString(String) - Static method in class org.gwtproject.safehtml.shared.UriUtils

Returns a SafeUri constructed from a trusted string, i.e., without sanitizing the string.

G

getInstance() - Static method in class org.gwtproject.safehtml.shared.SimpleHtmlSanitizer

Return a singleton SimpleHtmlSanitizer instance.

GwtIncompatible - Annotation Type in org.gwtproject.safehtml.shared.annotations

Marks some Java type or member as not compatible with the browser.

H

hashCode() - Method in class org.gwtproject.safehtml.shared.OnlyToBeUsedInGeneratedCodeStringBlessedAsSafeHtml

Returns a hash code for this string.

hashCode() - Method in interface org.gwtproject.safehtml.shared.SafeHtml

Returns a hash code for this string.

hashCode() - Method in interface org.gwtproject.safehtml.shared.SafeUri

Returns a hash code for this string.

HasSafeHtml - Interface in org.gwtproject.safehtml.client

An object that implements this interface contains text with HTML markup, which can be set with the Cross-Site-Scripting-safe HTML markup encapsulated in a SafeHtml object.

HTML_CHARS - Static variable in class org.gwtproject.safehtml.shared.SafeHtmlUtils

htmlEscape(char) - Static method in class org.gwtproject.safehtml.shared.SafeHtmlUtils

HTML-escapes a character.

htmlEscape(String) - Static method in class org.gwtproject.safehtml.shared.SafeHtmlUtils

HTML-escapes a string.

htmlEscapeAllowEntities(String) - Static method in class org.gwtproject.safehtml.shared.SafeHtmlUtils

HTML-escapes a string, but does not double-escape HTML-entities already present in the string.

HtmlSanitizer - Interface in org.gwtproject.safehtml.shared

Sanitizes untrusted HTML.

I

isCompleteHtml(String) - Static method in class org.gwtproject.safehtml.shared.SafeHtmlHostedModeUtils

Returns whether the provided HTML string is complete (ends in "inner HTML" context).

IsSafeHtml - Annotation Type in org.gwtproject.safehtml.shared.annotations

A type annotation that represents values that are safe to use in a HTML context.

IsSafeUri - Annotation Type in org.gwtproject.safehtml.shared.annotations

A type annotation that represents values that are safe to use in a URI context.

isSafeUri(String) - Static method in class org.gwtproject.safehtml.shared.UriUtils

Determines if a String is safe to use as the value of a URI-valued HTML attribute such as src or href.

IsTrustedResourceUri - Annotation Type in org.gwtproject.safehtml.shared.annotations

A type annotation that represents URIs referencing the application’s own, trusted resources.

isValidUriCharset(String) - Static method in class org.gwtproject.safehtml.shared.SafeUriHostedModeUtils

Tests whether all characters in the given URI are valid Web Addresses characters.

M

maybeCheckCompleteHtml(String) - Static method in class org.gwtproject.safehtml.shared.SafeHtmlHostedModeUtils

Conditionally checks if the provided HTML string is complete (ends in "inner HTML" context).

maybeCheckValidUri(String) - Static method in class org.gwtproject.safehtml.shared.SafeUriHostedModeUtils

Checks if the provided URI is a valid Web Address (per RFC 3987bis).

O

OnlyToBeUsedInGeneratedCodeStringBlessedAsSafeHtml - Class in org.gwtproject.safehtml.shared

A string wrapped as an object of type SafeHtml.

OnlyToBeUsedInGeneratedCodeStringBlessedAsSafeHtml(String) - Constructor for class org.gwtproject.safehtml.shared.OnlyToBeUsedInGeneratedCodeStringBlessedAsSafeHtml

Constructs an instance from a given HTML String.

org.gwtproject.safehtml.client - package org.gwtproject.safehtml.client

Interfaces for creating safe HTML content using templates.

org.gwtproject.safehtml.shared - package org.gwtproject.safehtml.shared

Shared classes for creating safe HTML content.

org.gwtproject.safehtml.shared.annotations - package org.gwtproject.safehtml.shared.annotations

S

SafeHtml - Interface in org.gwtproject.safehtml.shared

An object that implements this interface encapsulates HTML that is guaranteed to be safe to use (with respect to potential Cross-Site-Scripting vulnerabilities) in an HTML context.

SafeHtmlBuilder - Class in org.gwtproject.safehtml.shared

A builder that facilitates the building up of XSS-safe HTML from text snippets.

SafeHtmlBuilder() - Constructor for class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Constructs an empty SafeHtmlBuilder.

SafeHtmlHostedModeUtils - Class in org.gwtproject.safehtml.shared

SafeHtml utilities whose implementation differs between Development and Production Mode.

SafeHtmlHostedModeUtils() - Constructor for class org.gwtproject.safehtml.shared.SafeHtmlHostedModeUtils

SafeHtmlTemplates - Interface in org.gwtproject.safehtml.client

A tag interface that facilitates compile-time binding of HTML templates to generate SafeHtml strings.

SafeHtmlTemplates.Template - Annotation Type in org.gwtproject.safehtml.client

The HTML template.

SafeHtmlUtils - Class in org.gwtproject.safehtml.shared

Utility class containing static methods for escaping and sanitizing strings.

SafeUri - Interface in org.gwtproject.safehtml.shared

An object that implements this interface encapsulates a URI that is guaranteed to be safe to use (with respect to potential Cross-Site-Scripting vulnerabilities) in a URL context, for example in a URL-typed attribute in an HTML document.

SafeUriHostedModeUtils - Class in org.gwtproject.safehtml.shared

SafeUri utilities whose implementation differs between Development and Production Mode.

SafeUriHostedModeUtils() - Constructor for class org.gwtproject.safehtml.shared.SafeUriHostedModeUtils

sanitize(String) - Method in interface org.gwtproject.safehtml.shared.HtmlSanitizer

Sanitizes a string into SafeHtml.

sanitize(String) - Method in class org.gwtproject.safehtml.shared.SimpleHtmlSanitizer

sanitizeHtml(String) - Static method in class org.gwtproject.safehtml.shared.SimpleHtmlSanitizer

HTML-sanitizes a string.

sanitizeUri(String) - Static method in class org.gwtproject.safehtml.shared.UriUtils

Sanitizes a URI.

setForceCheckCompleteHtml(boolean) - Static method in class org.gwtproject.safehtml.shared.SafeHtmlHostedModeUtils

Sets a global flag that controls whether or not SafeHtmlHostedModeUtils.maybeCheckCompleteHtml(String) should perform its check in a server-side environment.

setForceCheckCompleteHtmlFromProperty() - Static method in class org.gwtproject.safehtml.shared.SafeHtmlHostedModeUtils

Sets a global flag that controls whether or not SafeHtmlHostedModeUtils.maybeCheckCompleteHtml(String) should perform its check in a server-side environment from the value of the "com.google.gwt.safehtml.ForceCheckCompleteHtml" property.

setForceCheckValidUri(boolean) - Static method in class org.gwtproject.safehtml.shared.SafeUriHostedModeUtils

Sets a global flag that controls whether or not SafeUriHostedModeUtils.maybeCheckValidUri(String) should perform its check in a server-side environment.

setForceCheckValidUriFromProperty() - Static method in class org.gwtproject.safehtml.shared.SafeUriHostedModeUtils

Sets a global flag that controls whether or not SafeUriHostedModeUtils.maybeCheckValidUri(String) should perform its check in a server-side environment from the value of the "com.google.gwt.safehtml.ForceCheckValidUri" property.

setHTML(SafeHtml) - Method in interface org.gwtproject.safehtml.client.HasSafeHtml

Sets this object's contents via known-safe HTML.

SimpleHtmlSanitizer - Class in org.gwtproject.safehtml.shared

A simple and relatively inexpensive HTML sanitizer.

SuppressIsSafeHtmlCastCheck - Annotation Type in org.gwtproject.safehtml.shared.annotations

Annotates methods that rely on potentially-unsafe type-annotation casts.

SuppressIsSafeUriCastCheck - Annotation Type in org.gwtproject.safehtml.shared.annotations

Annotates methods that rely on potentially-unsafe type-annotation casts.

SuppressIsTrustedResourceUriCastCheck - Annotation Type in org.gwtproject.safehtml.shared.annotations

Annotates methods that rely on potentially-unsafe type-annotation casts.

T

toSafeHtml() - Method in class org.gwtproject.safehtml.shared.SafeHtmlBuilder

Returns the safe HTML accumulated in the builder as a SafeHtml.

U

unsafeCastFromUntrustedString(String) - Static method in class org.gwtproject.safehtml.shared.UriUtils

Deprecated.

This method is intended only for use in APIs that use SafeUri to represent URIs, but for backwards compatibility have methods that accept URI parameters as plain strings.

UriUtils - Class in org.gwtproject.safehtml.shared

Utility class containing static methods for validating and sanitizing URIs.

A E F G H I M O S T U