Home/ Questions/Q 119061
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T03:35:36+00:00

I’m trying to create a Regex to block all < and > in a

  • 0

I’m trying to create a Regex to block all < and > in a String except when used with <select>. Can anyone suggest a Regex for that? I’ll be using it with javax.util.Pattern.

I’m trying to write a solution to block the injection attack and XSS attempts through request and URL. For that, I’ll be blocking the special characters and character sequences but with some exceptions. One of the exception is that, I have to allow <select> (angle brackets with select in between them) because that is passed into the request legitimately in some of the cases. But all other combinations of angle brackets have to be blocked. And that is the reason of my question.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Pattern p = Pattern.compile(   '(?<!\\<select)>|<(?!\s*select\s*>)',   Pattern.CASE_INSENSITIVE);

    This will find > not preceded by <select and < not followed by select> allowing it to be case-insensitive.

    Now normally I’d check for (legal) white-space around the element (‘< select >‘ is valid) but the lookbehind has issues with that that I’m not really sure how to get around.

    • 0