search

demba90 / owasp-esapi-java

Automatically exported from code.google.com/p/owasp-esapi-java
Other
0 stars 0 forks source link

not able to encode/validate Windows style paths #187

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1. You have a windows style path such as "C:\windows\hero.txt"
2. call GetValidInput with DirectoryPath regex or call encodeForHtml() after 
canonicalizing this input string.
3. the result is unusable. All the "\" are stripped off and path is not usable 
any more.

What is the expected output? What do you see instead?
It should only encode unwanted characters

What version of the product are you using? On what operating system?
ESAPI2.0RC10

Does this issue affect only a specified browser or set of browsers?

All
Please provide any additional information below.

string was - "C:\windows"
after canonicalization it becomes - "C:windows"
and similarly other "\" are removed.

Original issue reported on code.google.com by shilpi.a...@gmail.com on 30 Nov 2010 at 3:48

GoogleCodeExporter commented 8 years ago 
Hi, Is there any update on this issue? This is a very urgent issue for us.

Original comment by shilpi.a...@gmail.com on 9 Aug 2012 at 8:49