Open GoogleCodeExporter opened 8 years ago
Until this is fixed, copy the esapi.tld out of the configuration zip to your
WEB-INF/tld/esapi.tld and add the following to your web.xml
<jsp-config>
<taglib>
<taglib-uri>http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API</taglib-uri>
<taglib-location>/WEB-INF/tld/esapi.tld</taglib-location>
</taglib>
</jsp-config>
Original comment by schal...@gmail.com
on 20 Sep 2011 at 7:00
The issue is still present with version 2.1
I find it surprising that such an issue is not yet solved. Especially regarding
a library that is focused on security.
There is already so many ways people add security holes in there application
that they should not bother fetching the correct tld from the website and put
add the proper configuration.
Original comment by olivier.hubaut
on 13 Dec 2013 at 3:32
This still seems to be unresolved
Original comment by lukens...@gmail.com
on 26 Feb 2014 at 12:02
Yes, I am a little disappointed that this has not been addressed still.
Original comment by bhanu.ga...@gmail.com
on 15 Dec 2014 at 7:49
Original issue reported on code.google.com by
raghuvee...@gmail.com
on 5 Aug 2011 at 5:53