GlideStringUtil - Scoped, Global

The GlideStringUtil API provides string handling methods.

Access these methods using the static object GlideStringUtil. This class is available in scoped and global scripts.

GlideStringUtil - dotToUnderBar(String sourceString)

Replaces periods with underscore characters.

표 1. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 2. Returns

Type	Description
String	Text with periods replaced with underscores.

var filename="../../../../../../etc/passwd";
cleanFilename=GlideStringUtil.dotToUnderBar(filename);
gs.info(cleanFilename);

Output:

 __/__/__/__/__/__/etc/passwd

GlideStringUtil - escapeAllQuotes(String sourceString)

Removes quotes from a string.

표 3. Parameters

Name	Type	Description
sourceString	String	The string to be processed.

표 4. Returns

Type	Description
String	The string with quotes removed.

mystring="let's escape some quotes";
escapeQuote=GlideStringUtil.escapeAllQuotes(mystring);
gs.info(escapeQuote);

Output:

lets escape some quotes

GlideStringUtil - escapeForHomePage(String sourceString)

Replaces problem characters with escape characters.

표 5. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 6. Returns

Type	Description
String	Text with problem characters replaced with escape characters.

mystring="<test> string \n to escape";
escapedString=GlideStringUtil.escapeForHomePage(mystring);
gs.info(escapedString);

Output:

%3ctest%3e string \n to escape

GlideStringUtil - escapeHTML(String htmlString)

Replaces illegal characters with their escape codes.

Using this method removes illegal characters that might cause the UI to render improperly, or trigger a client side attack such as JavaScript or HTML injection.

표 7. Parameters

Name	Type	Description
htmlString	String	Text to process.

표 8. Returns

Type	Description
String	Text with illegal characters replaced with their escape codes.

mydata='"<>&';
mydata=GlideStringUtil.escapeHTML(mydata);
gs.info(mydata);

Output:

"<>&

GlideStringUtil - escapeNonPrintable(String sourceString)

Replaces non-printable characters with their printable notation.

표 9. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 10. Returns

Type	Description
String	Text with non-printable characters replaced with printable notation.

mystring="test \x09 non \x00 printable \x07 chars";
escapedString=GlideStringUtil.escapeNonPrintable(mystring);
gs.info(escapedString);

Output:

test \t non \u0000 printable \u0007 chars

GlideStringUtil - escapeQueryTermSeparator(String sourceString)

Replaces query term separators "^" with their escape sequence "^^".

표 11. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 12. Returns

Type	Description
String	Text with query term separators replaced with the escape characters.

myquery="test^Test";
escapedQuery=GlideStringUtil.escapeQueryTermSeparator(myquery);
gs.info(escapedQuery);

Output:

test^^Test

GlideStringUtil - escapeTicks(String sourceString)

Replaces quotes with escape characters by adding a backslash before each quote.

표 13. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 14. Returns

Type	Description
String	Text with backslashes added before quotes.

mystring="let's try escapeTicks";
escaped=GlideStringUtil.escapeTicks(mystring);
gs.info(escaped); 

Output:

let\'s try escapeTicks

GlideStringUtil - getHTMLValue(String sourceString)

Replaces illegal HTML characters into HTML notation.

Using this method removes illegal characters that might cause the UI to render improperly, or trigger a client side attack such as JavaScript or HTML injection.

표 15. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 16. Returns

Type	Description
String	Text with illegal characters replaced with HTML notation.

mydata='&';
htmlvalue=GlideStringUtil.getHTMLValue(mydata);
gs.info(htmlvalue);

Output:

&

GlideStringUtil - getNumeric(String sourceString)

Extracts numeric characters from a string.

표 17. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 18. Returns

Type	Description
String	Text containing only numeric characters.

mystring='123 test 456 String 789 cleaning';
onlyNumeric=GlideStringUtil.getNumeric(mystring);
gs.info(onlyNumeric); 

Output:

123456789

GlideStringUtil - isBase64(String sourceString)

Validates whether the specified string is a valid base64 string.

표 19. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 20. Returns

Type	Description
Boolean	Flag that indicates whether the specified string is in valid base64 format. Possible values: true: Valid base64 formatted string. false: Invalid base64 formatted string.

//(adding a "*" to corrupt the base64 format)
base64="GethdTYehdtshetB*";
isValid=GlideStringUtil.isBase64(base64);
gs.info(isValid);

Output:

false

GlideStringUtil - isEligibleSysID(String sourceString)

Validates whether the specified string is in valid sys_id format.

The sys_id format is a sequence of 32 hexadecimal characters where all the characters are in the range [0-9, a-f, A-F].

표 21. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 22. Returns

Type	Description
Boolean	Flag that indicates whether the specified string is in valid sys_id format. Possible values: true: Valid sys_id formatted string. false: Invalid sys_id formatted string.

sysID="62826bf03710200044e0bfc8bcbe5df1";
isElig=GlideStringUtil.isEligibleSysID(sysID);
gs.info(isElig);

Output:

true

GlideStringUtil - newLinesToBreaks(String sourceString)

Replaces the new line character, /n, with a break code, <br/>.

표 23. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 24. Returns

Type	Description
String	Text with new line characters replaced with HTML break code.

mystring="new line break \n, this is after the break";
replaceNewLine=GlideStringUtil.newLinesToBreaks(mystring);
gs.info(replaceNewLine); 

Output:

new line break <br/>, this is after the break

GlideStringUtil - normalizeWhitespace(String sourceString)

Replaces carriage returns, line feeds, and tabs with spaces, and then removes leading, trailing, and duplicate spaces.

표 25. Parameters

Name	Type	Description
sourceString	String	Text to process.

표 26. Returns

Type	Description
String	Text with carriage returns, line feeds, and tabs replaced with spaces, and then leading, trailing, and duplicate spaces removed.

mystring="test with \n (new line) and \t (tabulation)";
normalizedString=GlideStringUtil.normalizeWhitespace(mystring);
gs.info(normalizedString);

Output:

test with (new line) and (tabulation)

GlideStringUtil - unEscapeHTML(String htmlString)

Replaces escape characters with their respective character.

This method replaces these escape characters: < &gt:   & &quote;.

주:

In scoped applications call this method as unescapeHTML(String). In global applications call this method as unEscapeHTML(String).

표 27. Parameters

Name	Type	Description
htmlString	String	String to process.

표 28. Returns

Type	Description
String	String with the escape characters replaced.

This code example shows the method being called in a global application.

mydata='"<>&';
unescaped=GlideStringUtil.unEscapeHTML(mydata);
gs.info(unescaped);

Output:

"<>&

This code example shows the method being called in a scoped application.

mydata='"<>&';
unescaped=GlideStringUtil.unescapeHTML(mydata);
gs.info(unescaped);

Output:

"<>&

GlideStringUtil - urlEncode(String url)

Encodes non-ASCII characters, unsafe ASCII characters, and spaces so you can use the returned string on the Internet. Uses UTF-8 encoding. Uses percent (%) encoding.

주:

Only available in global scope.

표 29. Parameters

Name	Type	Description
url	String	String to encode.

표 30. Returns

Type	Description
String	String with non-ASCII characters, unsafe ASCII characters, and spaces encoded.

var mystring='Test characters: " < > & &quot; &lt; &gt; &amp;';
escapedString=GlideStringUtil.urlEncode(mystring);
gs.info(escapedString);

Output:

Test+characters%3A+%22+%3C+%3E+%26+%26quot%3B+%26lt%3B+%26gt%3B+%26amp%3B