s.getChars(unescapedChunkStart, index, dest, destIndex);
          destIndex += charsSkipped;
        }
        if (escaped.length > 0) {
          System.arraycopy(escaped, 0, dest, destIndex, escaped.length);
          destIndex += escaped.length;
        }
        // If we dealt with an escaped character, reset the unescaped range.
        unescapedChunkStart = nextIndex;
      }

    // Test quotes are escaped.
    assertThat(xmlAttributeEscaper.escape("\"test\"")).isEqualTo(""test"");
    assertThat(xmlAttributeEscaper.escape("'test'")).isEqualTo("'test'");
    // Test all escapes
    assertThat(xmlAttributeEscaper.escape("a\"b<c>d&e\"f'"))
        .isEqualTo("a&quot;b&lt;c&gt;d&amp;e&quot;f&apos;");
    // Test '\t', '\n' and '\r' are escaped.

    assertThat(e.escape("")).isEqualTo("");
    assertThat(e.escape("safestring")).isEqualTo("safestring");
    assertThat(e.escape("embedded\0null")).isEqualTo("embedded%00null");
    assertThat(e.escape("max\uffffchar")).isEqualTo("max%EF%BF%BFchar");
  }

  // Helper to assert common expected behaviour of uri escapers.
  static void assertBasicUrlEscaper(UnicodeEscaper e) {

    Escaper escaper = Escapers.builder().setSafeRange('a', 'z').build();
    assertThat(escaper.escape("The Quick Brown Fox")).isEqualTo("The Quick Brown Fox");
  }

  public void testBuilderInitialStateNoneUnsafe() {
    // No characters are unsafe by default (safeMin == 0, safeMax == 0xFFFF).
    Escaper escaper = Escapers.builder().setUnsafeReplacement("X").build();
    assertThat(escaper.escape("\0\uFFFF")).isEqualTo("\0\uFFFF");

    Escaper escaper = Escapers.builder().setSafeRange('a', 'z').build();
    assertThat(escaper.escape("The Quick Brown Fox")).isEqualTo("The Quick Brown Fox");
  }

  public void testBuilderInitialStateNoneUnsafe() {
    // No characters are unsafe by default (safeMin == 0, safeMax == 0xFFFF).
    Escaper escaper = Escapers.builder().setUnsafeReplacement("X").build();
    assertThat(escaper.escape("\0\uFFFF")).isEqualTo("\0\uFFFF");

    }
  }

  public void testFalsePositivesForNextEscapedIndex() {
    UnicodeEscaper e =
        new UnicodeEscaper() {
          // Canonical escaper method that only escapes lower case ASCII letters.
          @Override
          protected char @Nullable [] escape(int cp) {
            return ('a' <= cp && cp <= 'z') ? new char[] {Character.toUpperCase((char) cp)} : null;
          }

    assertThat(e.escape("")).isEqualTo("");
    assertThat(e.escape("safestring")).isEqualTo("safestring");
    assertThat(e.escape("embedded\0null")).isEqualTo("embedded%00null");
    assertThat(e.escape("max\uffffchar")).isEqualTo("max%EF%BF%BFchar");
  }

  // Helper to assert common expected behaviour of uri escapers.
  static void assertBasicUrlEscaper(UnicodeEscaper e) {

    // Test quotes are escaped.
    assertThat(xmlAttributeEscaper.escape("\"test\"")).isEqualTo(""test"");
    assertThat(xmlAttributeEscaper.escape("'test'")).isEqualTo("'test'");
    // Test all escapes
    assertThat(xmlAttributeEscaper.escape("a\"b<c>d&e\"f'"))
        .isEqualTo("a&quot;b&lt;c&gt;d&amp;e&quot;f&apos;");
    // Test '\t', '\n' and '\r' are escaped.

    private LdapUtil() {
    }

    /**
     * Escapes special characters in a value for use in LDAP search filters.
     * This method escapes characters that have special meaning in LDAP filter expressions
     * to prevent LDAP injection attacks.
     *
     * @param value the value to escape (null is treated as empty string)
     * @return the escaped value safe for use in LDAP search filters

            logger.warn("Failed to render markdown, returning escaped plain text. error={}", e.getMessage());
            // Fallback to escaped plain text
            return escapeHtml(markdown);
        }
    }

    /**
     * Escapes HTML special characters for safe display.
     *
     * @param text the text to escape
     * @return HTML-escaped text
     */
    private String escapeHtml(final String text) {