Un-escape JavaScript escaped value in Java

Question

In our web service we set a cookie through JavaScript which we read again in Java (Servlet)

However we need to escape the value of the cookie because it may contain illegal characters such as '&' which messes up the cookie.

Is there a transparent way to escape (JavaScript) and unescape again (Java) for this?

score 7 · Accepted Answer · edited Apr 13 '16 at 14:22

7

In java you got StringEscapeUtils from Commons Lang to escape/unescape.

In Javascript you escape through encodeURIComponent, but I think the Commons component I gave to you will satisfy your needs.

edited Apr 13 '16 at 14:22

Robert

39,162
17
99
152

answered May 19 '09 at 10:51

Valentin Rocher

11,667
45
59

If you want to decode from encodeURIComponent see here http://stackoverflow.com/questions/607176/java-equivalent-to-javascripts-encodeuricomponent-that-produces-identical-outpu – reevesy Feb 15 '12 at 19:50

Cees Timmerman · Answer 2 · 2012-02-24T15:22:36.583

4

Client JavaScript/ECMAScript:

encodeURIComponent(cookie_value) // also encodes "+" and ";", see http://xkr.us/articles/javascript/encode-compare/

Server Java:

String cookie_value = java.net.URLDecoder.decode(cookie.getValue());

I'll add further discoveries to my blog entry.

edited Feb 24 '12 at 15:22

answered Feb 23 '12 at 11:03

Cees Timmerman

17,623
11
91
124

score 1 · Answer 3 · answered Oct 28 '14 at 14:34

The most accurate way would be to Excecute javascript withing your java code. Hope the code below helps.

ScriptEngineManager factory = new ScriptEngineManager();
   ScriptEngine engine = factory.getEngineByName("JavaScript");
   ScriptContext context = engine.getContext();
   engine.eval("function decodeStr(encoded){"
             + "var result = unescape(encoded);"
             + "return result;"
             + "};",context);

     Invocable inv;   

    inv = (Invocable) engine;
    String res =  (String)inv.invokeFunction("decodeStr", new Object[]{cookie.getValue()});

With nashorn engine, you can simply write: (String) invocable.invokeFunction("unescape", escapedString); — Shafiul, Oct 29 '16 at 09:23

score 1 · Answer 4 · answered Oct 29 '16 at 09:25

Common lang's StringEscapeUtils didn't work for me.

You can simply use javascript nashorn engine to unescape a escaped javascript string.

private String decodeJavascriptString(final String encodedString) {
    ScriptEngine engine = new ScriptEngineManager().getEngineByName("nashorn");
    Invocable invocable = (Invocable) engine;
    String decodedString = encodedString;
    try {
        decodedString = (String) invocable.invokeFunction("unescape", encodedString);

    } catch (ScriptException e) {
        e.printStackTrace();
    } catch (NoSuchMethodException e) {
        e.printStackTrace();
    }

    return decodedString;
}

Un-escape JavaScript escaped value in Java

4 Answers4

Linked