demba90 / owasp-esapi-java

Automatically exported from code.google.com/p/owasp-esapi-java
Other
0 stars 0 forks source link

Regex in ESAPI.properties is not considering few of the french characters #331

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1. Trying to Add french characters in esapi.properties file for whitelist 
validation.
2. here is the regex 
^[a-zA-Z0-9.\\-_'!()áéíóúÁÉÍÓÚüÜñÑÀàÂâÆæÇçÈèÉéÊêËë
ÎîÏïÔôŒœÙùÛûÜüŸÿ«»€,&\\/~"`@#$%*=+\\[\\]:;?©®\\^|\\\\ 
]{1,300}$
3. ESAPI is not recognizing €, Œ,œ, Ÿ characters.

What is the expected output? What do you see instead?
The ESAPI should allow the inputs which has the above french characters.
Instead it is treating them as invalid. When i printed the regex which is 
validated with, the printed output is not showing these characters. please let 
me know, if there is any limitation.

What version of the product are you using? On what operating system?
ESAPI 1.4.4 (bundled with Adobe Cold Fusion 8 security hotfixes), Windows 7

Does this issue affect only a specified browser or set of browsers?
N/A

Please provide any additional information below.

Original issue reported on code.google.com by ragavend...@gmail.com on 8 Jul 2014 at 2:26

GoogleCodeExporter commented 8 years ago
[deleted comment]
GoogleCodeExporter commented 8 years ago
Facing the exact same issue, except on the encoding side.

When a string containing the french characters (€, Œ,œ, Ÿ) is entered it 
replaces them for other safe characters.

Thanks.

Original comment by GeetCha...@gmail.com on 13 Nov 2014 at 11:49