Encodes the input string for safe output in CSS to prevent Cross Site Scripting attacks.
encodeForCSS(string [,canonicalize]);
→ returns string
false
Encoding CSS values.
<cfif not isDefined ('form.bgcolor')>
<cfset form.bgcolor = 'red'>
</cfif>
<cfoutput>
<style>
.myDiv
{
background-color : #encodeForCSS(form.bgcolor)#;
/* Encode the input to avoid any malicious code execution.*/
}
</style></cfoutput>
<hr/>
<cfoutput>
<div class='myDiv'>
This div element is styled!!!!
</div>
</cfoutput>
<hr/>
<cfform action='#cgi.SCRIPT_NAME#' method='post' >
Background Color : <cfinput name='bgcolor' type='text' value='#form.bgcolor#'> <br/> <cfinput name='submit' type='submit' value='Style the div!!!'>
</cfform>
Signup for cfbreak
to stay updated on the latest news from the ColdFusion / CFML community. One email, every friday.