Skills
.Work. You
Rest

bx-esapi

Official

ESAPI encoding and sanitization for BoxLang.

Software Engineering#security#xss#sanitization#encoding#boxlang#antisamy#esapi
Authorortus-boxlang
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Prevents cross-site scripting and injection by offering ESAPI-based encoding, decoding, and HTML sanitization in BoxLang, enabling safe rendering of user input.

Core Features & Use Cases

  • Robust encoding across contexts: HTML, HTMLAttribute, JavaScript, CSS, URL, SQL, XML, LDAP, and more.
  • Decoding and canonicalization: decodeFromHTML(), decodeFromURL(), and related operations with safe handling.
  • HTML sanitization: htmlSanitize() with built-in and policy-based AntiSamy support to strip dangerous content.

Quick Start

Call encodeForHTML on user input before rendering it into HTML to prevent XSS.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: bx-esapi
Download link: https://github.com/ortus-boxlang/skills/archive/main.zip#bx-esapi

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.