Encodes the input string for safe output in CSS to prevent Cross Site Scripting attacks.
					
					encodeForCSS(string [,canonicalize]);
					
						→ returns string
					
				
falsebx-esapi module.
									Encoding CSS values.
<cfif not isDefined ('form.bgcolor')> 
 <cfset form.bgcolor = 'red'> 
 </cfif> 
 <cfoutput> 
 <style> 
 .myDiv 
 { 
 background-color : #encodeForCSS(form.bgcolor)#; 
 /* Encode the input to avoid any malicious code execution.*/ 
 } 
 </style></cfoutput> 
 <hr/> 
 <cfoutput> 
 <div class='myDiv'> 
 This div element is styled!!!! 
 </div> 
 </cfoutput> 
 <hr/> 
 <cfform action='#cgi.SCRIPT_NAME#' method='post' > 
 Background Color : <cfinput name='bgcolor' type='text' value='#form.bgcolor#'> <br/> <cfinput name='submit' type='submit' value='Style the div!!!'>
</cfform>
							
						Signup for cfbreak to stay updated on the latest news from the ColdFusion / CFML community. One email, every friday.