ESAPI esapi-java-legacy issues

ESAPI / esapi-java-legacy

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.

https://owasp.org/www-project-enterprise-security-api/

Other

597 stars 363 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

ESAPI.encoder().canonicalize() converts "&or" or similar strings without having trailing semicolon as logical operator

#846 tusharkumawat closed 1 week ago
4
Update the logging properties to opt-out of the prefix events #844

#845 mickeyz07 opened 1 week ago
2
Update the logging properties to opt-out of the prefix events

#844 mickeyz07 opened 3 weeks ago
1
Issue #839 JavaLogFactory ConcMod

#840 jeremiahjstacey closed 1 month ago
1
ConcurrentModificationException

#839 JerryDevis closed 1 month ago
9
Getting org.owasp.esapi.errors.ConfigurationException: java.lang.reflect.InvocationTargetException Encoder class (org.owasp.esapi.reference.DefaultEncoder) CTOR threw exception.

#838 PriyatamaB opened 2 months ago
4
Validation does not work with esapi jakarta jar

#837 popa-raluca closed 2 months ago
3
Validator.isValidSafeHTML() is vulnerable as per CVE-2023-4780

#835 Adwait-Joshi94 closed 3 months ago
1
fix: upgrade Antisamy to 1.7.5 to resolve CVE-2024-23635

#833 mpreziuso closed 4 months ago
2
easpi .properties and validation properties are present but still it is throwing error and the application is failing do you have any solution for this

#832 sh26masood closed 4 months ago
3
java.io.FileNotFoundException Error in Logs When ESAPI.properties and validation.properties are in resources. and the application is up ,features are not working.

#831 sh26masood closed 4 months ago
9
[Snyk] Security upgrade org.owasp.antisamy:antisamy from 1.7.4 to 1.7.5

#830 kwwall closed 4 months ago
2
Bump org.owasp.antisamy:antisamy from 1.7.4 to 1.7.5

#829 dependabot[bot] closed 5 months ago
2
PR to fix #824 and reference to #823

#828 xeno6696 closed 1 month ago
5
HTMLEntityCodec Mysteriously decodes &or

#827 xeno6696 closed 5 months ago
11
Fix Encoder.getCanonicalizedURI(URI) for the test case of a double-ampersand in the HTML Query

#826 xeno6696 closed 1 month ago
1
Bump org.owasp:dependency-check-maven from 9.0.0 to 9.0.6

#825 dependabot[bot] closed 5 months ago
0
DefaultEncoder / getCanonicalizedURI returns mix encoding for HTML special characters

#824 xeno6696 closed 1 month ago
5
2.5.3.1 preparation

#818 kwwall closed 7 months ago
1
Update GitHub issue templates to remove reference to now closed Discu…

#817 kwwall closed 7 months ago
1
Revert Dependency Check goal from 'purge' to 'check' once NVD API stops returning 503 'Service Unavailable' errors

#815 kwwall opened 7 months ago
1
decode method doesn't work proper for some strings

#814 mukesh4804 opened 7 months ago
3
Added property to omit event type information in logs

#813 RodolfoAndre opened 7 months ago
2
Fix Encoder.encodeForLDAP and Encoder.encodeForDN so they are strictly conformant with Section 3 of RFC 4515

#812 kwwall closed 7 months ago
1
Option to omit event type prefix in logs

#811 RodolfoAndre opened 7 months ago
1
Preparation for ESAPI 2.5.3.0 release

#809 kwwall closed 7 months ago
5
Fix typo in comment in validation.properties files

#808 kwwall closed 8 months ago
2
fix typo, remove double `and`

#807 robstoll closed 8 months ago
0
Does esapi-java-legacy support jDK17

#805 JerryDevis closed 8 months ago
1
Update antisamy lib version

#803 sreekesh93 closed 8 months ago
1
[Snyk] Security upgrade org.owasp.antisamy:antisamy from 1.7.3 to 1.7.4

#802 kwwall closed 7 months ago
1
Bump org.owasp.antisamy:antisamy from 1.7.3 to 1.7.4

#801 dependabot[bot] closed 7 months ago
2
Change AntiSamy to eventually use SAX parser by default, but allow DOM parser to be used for backward compatibility

#800 kwwall opened 9 months ago
0
Using Eclipse Transformer plugin to create Jakarta JAR

#799 jcputney closed 7 months ago
3
Insecure default signature key length

#798 akwick closed 7 months ago
3
Logs printed using println() are always printed and no option to disable them.

#796 aabhasg closed 10 months ago
2
ESAPI excludes transitive dependency xalan from xom, but does not include it itself

#795 in-fke opened 10 months ago
2
canonicalize sees entity which isn't there

#794 bardware closed 7 months ago
7
Context should also be logged in HTMLValidationRule

#793 kwwall opened 11 months ago
0
хз

#792 Koslx888 closed 11 months ago
1
fixed syntax

#791 preetgami closed 1 year ago
2
Update LDAP encoders

#790 noloader closed 8 months ago
8
Whitespace check-in

#789 noloader closed 1 year ago
0
Fix Javadoc code example in ValidationErrorList

#788 kwwall opened 1 year ago
0
Migration javax -> jakarta if anyone need it

#787 rjunqueira closed 1 year ago
8
Fix reference

#786 noloader closed 1 year ago
0
Initial 2.5.2.0 release preparation

#784 kwwall closed 1 year ago
2
HTTPUtilities needs its Javadoc seriously reworked

#783 kwwall opened 1 year ago
0
Javadoc needs updated to correct links to OWASP ESAPI wiki page

#781 kwwall opened 1 year ago
1
ESAPI is not returning right logger level

#780 SalmanMohammedTR opened 1 year ago
6