in src/main/java/org/apache/sling/auth/core/spi/AbstractAuthenticationFormServlet.java [186:209]
private static String escape(final String input) {
if (input == null) {
return null;
}
final StringBuilder b = new StringBuilder(input.length());
for (int i = 0; i < input.length(); i++) {
final char c = input.charAt(i);
if (c == '&') {
b.append("&");
} else if (c == '<') {
b.append("<");
} else if (c == '>') {
b.append(">");
} else if (c == '"') {
b.append("%22");
} else if (c == '\'') {
b.append("%27");
} else {
b.append(c);
}
}
return b.toString();
}