search

nanjug / owasp-esapi-js

Automatically exported from code.google.com/p/owasp-esapi-js
Other
0 stars 0 forks source link

Having issues with URL validation #19

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
I am using the below code to check the passing URL is valid or not.
Its giving true irrespective of the input I pass.Please let me know ,I am doing 
anything wrong.Attached in the jsp file contains the code.
What steps will reproduce the problem?
1. Please use the JSP file attached herewith to reproduce the issue.
2.
3.

What is the expected output? What do you see instead?
true or false depends on the input gets passed.

What version of the product are you using? On what operating system?
esapi4j-0.1.3 ,Windows 7 64 bit

Please provide any additional information below.
For Ex : I am passing input as <script>alert(1);</script>. The isValidInput fn 
returning true

Original issue reported on code.google.com by send2sur...@gmail.com on 20 Jan 2015 at 11:41

Attachments: