Can Lucee 7 be configured to use the same XSS encoding as Lucee 6?

nah, i think esapiEncode(modern=true) is better :slight_smile:

I have created a ticket for this

https://luceeserver.atlassian.net/browse/LDEV-6075