Java library that escapes quotation marks

Question

I often have to escape many quotation marks in a String. Is there a library that provides String functions such as this. It's easy enough to write, but something that had lots of different features/options for escaping would be handy.

Answer 1

Apache Commons has a StringEscapeUtils class which is able to escape (and unescape) in the following formats:

• CSV
• HTML
• Java
• JavaScript
• SQL
• XML

Answer 2

It depends on the context in which you're escaping the quotation marks. Usually, it should be handled by a task-specific library. For example, if you're escaping quotes for use in an SQL string, you should be using parameter placeholders instead of concatenating the string. If you're escaping quotes for use in a JSP, you should use <c:out> which will deal with quotes and other HTML entities.

Answer 3

You can use OWASP's Enterprise Security API (Java Edition)