2.5.3.1 preparation - Githubissues

ESAPI / esapi-java-legacy

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.

https://owasp.org/www-project-enterprise-security-api/

Other

598 stars 363 forks source link

2.5.3.1 preparation #818

Closed kwwall closed 7 months ago

kwwall commented 7 months ago

ESAPI 2.5.3.1 is a minor point release that adds:

Updated Javadoc for the Validator.isValidSafeHTML and ValidationRule.getValid methods.
Adds an always on log message (a single time only) if either of the isValidSafeHTML methods is invoked. The warning notes that the method is deprecated and provides a link to the GitHub Security Advisory.

kwwall commented 7 months ago

@xeno6696 - This should be really fast to review. The code changes are minimal (limited to DefaultValidator class). The rest are documentation changes and a minor pom tweak. Please try to get this done before 5pm ET on Dec 1, 2023 so I can get the release started right after work. That will allow me to finish it before I have to travel Sat morning. Thanks.