assertEscaping(xmlEscaper, "\uFFFD", '\uFFFF');

    assertEquals(
        "0xFFFE is forbidden and should be replaced during escaping",
        "[\uFFFD]",
        xmlEscaper.escape("[\ufffe]"));
    assertEquals(
        "0xFFFF is forbidden and should be replaced during escaping",
        "[\uFFFD]",
        xmlEscaper.escape("[\uffff]"));
  }

    }

    @Test
    public void testEscapeWildcardQuery() {
        // Test escaping asterisk
        String query1 = "test*query";
        String escaped1 = SuggestUtil.escapeWildcardQuery(query1);
        assertEquals("test\\*query", escaped1);

        // Test escaping question mark
        String query2 = "test?query";
        String escaped2 = SuggestUtil.escapeWildcardQuery(query2);

    }

    public void test_escapeXml_empty() {
        // Test empty string
        assertEquals("", XmlUtil.escapeXml(""));
    }

    public void test_escapeXml_basic() {
        // Test basic XML escaping
        assertEquals("&lt;tag&gt;value&lt;/tag&gt;", XmlUtil.escapeXml("<tag>value</tag>"));
    }

    public void test_escapeXml_allSpecialChars() {
        // Test all special characters

- Added support for CEL expressions with escaped names in the structured authentication config. Using `[...]` to access claims or user data was recommended when names contained characters that would otherwise need escaping. CEL optionals with `?` could be used where has was not applicable — for example, `claims[?"kubernetes.io"]` or `user.extra[?"domain.io/foo"]`. ([#131574](https://github.com/kubernetes/kubernetes/pull/131574), [@enj](https://github.com/enj)) [SIG...