Remove @SafeHtml from Bean Validation Cheat Sheet (#888) (#1219)

OWASP · Oct 25, 2023 · 977be2e · 977be2e
1 parent 745dd76
commit 977be2e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/cheatsheets/Bean_Validation_Cheat_Sheet.md b/cheatsheets/Bean_Validation_Cheat_Sheet.md
@@ -448,12 +448,13 @@ In addition to providing the complete set of JSR303 constraints, Hibernate Valid
 - `@Email`
 - `@Length`
 - `@Range`
-- `@SafeHtml`
 - `@ScriptAssert`
 - `@URL`
 
 Take a look at this [table](https://docs.jboss.org/hibernate/validator/5.2/reference/en-US/html/ch02.html#table-custom-constraints) for the complete list.
 
+Note that `@SafeHtml`, a previously valid constraint, has been deprecated according to the [Hibernate Validator 6.1.0.Final and 6.0.18.Final release blogpost](https://in.relation.to/2019/11/20/hibernate-validator-610-6018-released/). Please refrain from using the `@SafeHtml` constraint.
+
 ## Custom Constraints
 
 One of the most powerful features of bean validation is the ability to define your own constraints that go beyond the simple validation offered by built-in constraints.