In prior Java 101 articles, I referred to the concepts of redirection, standard input device, and standard output device. To demonstrate inputting data, several examples called System.in.read ().

This is applied to the ESAPI’s validator API getValidInput (). Output validation is accomplished by ESAPI’s encoder API called encodeForHtml (). Now, untrusted input is safe to be printed in HTML.