harini-nagarajan-5578 / owasp-esapi-java

Automatically exported from code.google.com/p/owasp-esapi-java
Other
3 stars 0 forks source link

Unable to use the esapi taglib as esapi.tld file is missing in the ESAPI 2.0 GA release #237

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1.Try using ESAPI tags in JSP file
2.
3.

What is the expected output? What do you see instead?

What version of the product are you using? On what operating system?
ESAPI 2.0 GA, Windows

Does this issue affect only a specified browser or set of browsers?

Please provide any additional information below.

Original issue reported on code.google.com by raghuvee...@gmail.com on 5 Aug 2011 at 5:53

GoogleCodeExporter commented 8 years ago
Until this is fixed, copy the esapi.tld out of the configuration zip to your 
WEB-INF/tld/esapi.tld and add the following to your web.xml

        <jsp-config>
                <taglib>
                        <taglib-uri>http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API</taglib-uri>
                        <taglib-location>/WEB-INF/tld/esapi.tld</taglib-location>
                </taglib>
        </jsp-config>

Original comment by schal...@gmail.com on 20 Sep 2011 at 7:00

GoogleCodeExporter commented 8 years ago
The issue is still present with version 2.1
I find it surprising that such an issue is not yet solved. Especially regarding 
a library that is focused on security. 
There is already so many ways people add security holes in there application 
that they should not bother fetching the correct tld from the website and put 
add the proper configuration.

Original comment by olivier.hubaut on 13 Dec 2013 at 3:32

GoogleCodeExporter commented 8 years ago
This still seems to be unresolved

Original comment by lukens...@gmail.com on 26 Feb 2014 at 12:02

GoogleCodeExporter commented 8 years ago
Yes, I am a little disappointed that this has not been addressed still.

Original comment by bhanu.ga...@gmail.com on 15 Dec 2014 at 7:49