search

mway08 / owasp-esapi-java

Automatically exported from code.google.com/p/owasp-esapi-java
Other
0 stars 0 forks source link

HTTPServletPath regular expression missing from ESAPI.properties #124

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
Validator.HTTPServletPath is not in the default ESAPI.properties as a 
regular expression so the String "HTTPServletPath" is compiled and used as 
the regular expression to validate servlet paths when the 
SecurityRequestWrapper calls this: 

clean = ESAPI.validator().getValidInput("HTTP servlet path: " + path, path, 
"HTTPServletPath", 100, false);

What version of the product are you using? On what operating system?
trunk rev. 1400

Please provide any additional information below.

Original issue reported on code.google.com by hal.dead...@gmail.com on 11 May 2010 at 8:08

GoogleCodeExporter commented 9 years ago 
We need to review and fix this before 2.0GA

Original comment by manico.james@gmail.com on 2 Nov 2010 at 7:49

GoogleCodeExporter commented 9 years ago

Original comment by manico.james@gmail.com on 2 Nov 2010 at 8:00

GoogleCodeExporter commented 9 years ago 
Looks like August fixed this as well - pending his close.

Original comment by jtmel...@gmail.com on 4 Nov 2010 at 2:54

GoogleCodeExporter commented 9 years ago 
Checked in as revision #1532

Original comment by augu...@gmail.com on 4 Nov 2010 at 5:00