First on the side, any advice about taint best practices for taint checking with jsp/java would be appreciated.
Second, I'm trying to match any "&" that does not appear as part of "& a m p ;". (The spaces are not supposed to be there, but you wouldn't see anything otherwise.)
I haven't gotten anything that works satisfactorily. I've tried variations on:
Pattern.compile("&^(amp;)");
but with no avail, so I'm obviously missing something.
null