Be clearer about quotes in forHtmlAttribute docs.

meeque · web-flow · commit 604a78f9b926 · 2024-04-19T00:39:28.000+02:00
diff --git a/core/src/main/java/org/owasp/encoder/Encode.java b/core/src/main/java/org/owasp/encoder/Encode.java
@@ -276,6 +276,8 @@ public static void forHtmlContent(Writer out, String input)
      *
      * <p><b>Additional Notes</b></p>
      * <ul>
+     * <li>When using this method, the caller must provide quotes around the attribute value.</li>
+     *
      * <li>Both the single-quote character ({@code '}) and the
      * double-quote character ({@code "}) are encoded so this is safe
      * for HTML attributes with either enclosing character.</li>

Original file line number	Diff line number	Diff line change
`@@ -276,6 +276,8 @@ public static void forHtmlContent(Writer out, String input)`
`276`	`276`	`*`
`277`	`277`	`* <p><b>Additional Notes</b></p>`
`278`	`278`	`* <ul>`
	`279`	`+ * <li>When using this method, the caller must provide quotes around the attribute value.</li>`
	`280`	`+ *`
`279`	`281`	`* <li>Both the single-quote character ({@code '}) and the`
`280`	`282`	`* double-quote character ({@code "}) are encoded so this is safe`
`281`	`283`	`* for HTML attributes with either enclosing character.</li>`