search

chiu01 / owasp-esapi-java

Automatically exported from code.google.com/p/owasp-esapi-java
0 stars 0 forks source link

Configuration for SecurityWrapper #70

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
Need to add the ability for the SecurityWrapper Filter to be configured.

Also the SecurityWrapper is not clearing the currentRequest and
currentResponse ThreadLocal's which can result in Session Hijacking/Loss
and Request Merging

Original issue reported on code.google.com by chrisisbeef on 5 Dec 2009 at 1:49

GoogleCodeExporter commented 8 years ago 
This issue was closed by revision r852.

Original comment by chrisisbeef on 5 Dec 2009 at 2:57