What steps will reproduce the problem?
i tried to implement the ESAPI implementation in our application like the below
code by adding ESAPI jar and two property files and added the system resource
variable pointing to the property files ,
import org.owasp.esapi.Logger;
import org.owasp.esapi.ESAPI;
public class BrandTag extends BodyTagSupport {
private final static Logger logger = (org.owasp.esapi.Logger)ESAPI.getLogger(BrandTag.class);
public int doStartTag() throws javax.servlet.jsp.JspException{
Object sessionObj = pageContext.getSession().getAttribute(getBrandName);
if(getBrandName!= null){
try {
logger.info(Logger.EVENT_SUCCESS,"ESAPI's log: brand received from getBrandName is "+getBrandName);
with this code am able get the log only after restarting the web server. if i
made any changes in code and try to publish it, am getting error
org.owasp.esapi.reference.Log4JLogger incompatible with org.owasp.esapi.Logger.
i have deployed EAR in DEV server, its working fine. but in RSA while
publishing only am getting class type cast error
What is the expected output? What do you see instead?
What version of the product are you using? On what operating system?
Does this issue affect only a specified browser or set of browsers?
Please provide any additional information below.
Original issue reported on code.google.com by balakrsn...@gmail.com on 28 May 2014 at 8:57
Original issue reported on code.google.com by
balakrsn...@gmail.com
on 28 May 2014 at 8:57