nomadinjax esapi4cf issues

nomadinjax / esapi4cf

If anyone is interested in taking over this project please let me know! I no longer have the time to commit to it as my role has changed much since I took this over. This project deserves someone who can devote the necessary time to it! OWASP Enterprise Security API (ESAPI) for ColdFusion/CFML Project

http://damonmiller.github.io/esapi4cf/

BSD 3-Clause "New" or "Revised" License

37 stars 10 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Going to assume this project is dead?

#65 KrunchMuffin opened 6 years ago
1
Merge Development 1.2.0a to Master

#64 nomadinjax closed 10 years ago
0
Allow the password complexity rules "magic" number to be configurable in ESAPI.properties, defaulting to 16

#63 nomadinjax opened 10 years ago
0
Ensure all SafeSession methods access the CF session scope, not J2EE session

#62 nomadinjax closed 10 years ago
0
Get SafeFileTest 'testCreateFileNameNull' unit test passing

#61 nomadinjax closed 10 years ago
0
Investigate possible concurrency issues with modules

#60 nomadinjax closed 10 years ago
1
DefaultEncryptedProperties utility is marked incomplete

#59 nomadinjax opened 10 years ago
0
AuthenticatorTest#testSetCurrentUser Runnable is incomplete

#58 nomadinjax closed 10 years ago
0
AuthenticatorTest#testGetCurrentUser Runnable is incomplete

#57 nomadinjax closed 10 years ago
1
Create some basic automation tests using CFSelenium

#56 nomadinjax opened 10 years ago
1
HttpUtilities.logHTTPRequest must exclude CFID/CFTOKEN cookies

#55 nomadinjax closed 10 years ago
1
Add log4j as alternative Logger

#54 nomadinjax closed 10 years ago
1
Merging v1.1.1 into development

#53 nomadinjax closed 10 years ago
0
User serialization not working in Railo

#52 nomadinjax opened 10 years ago
0
Create AccessController documentation

#51 nomadinjax opened 10 years ago
0
Convert mock HTTP request, response, session objects to Java

#50 nomadinjax closed 10 years ago
1
Add getValidBoolean to validator

#49 nomadinjax closed 10 years ago
1
EnterpriseSecurityExceptionTest interferes with unit test extending

#48 nomadinjax closed 10 years ago
1
User implementations must be serializable

#47 nomadinjax closed 10 years ago
2
allow null/blank format argument to getValidDate/getValidNumber

#46 nomadinjax closed 10 years ago
1
Make getESAPI4JVersion cleaner - no try/catch

#45 nomadinjax closed 11 years ago
2
Investigate session invalidation

#44 nomadinjax opened 11 years ago
3
Provide simpler methods to override Authenticator module

#43 nomadinjax closed 10 years ago
3
ESAPIUserSessionKey is placed into Java Session, not CF Application Session

#42 nomadinjax closed 11 years ago
1
Add to default Authenticator ability to implement additional authentication types without overriding default method.

#41 nomadinjax opened 11 years ago
0
Modify Authenticator and AccessController to isolate data reads/writes to more easily override for DB interaction

#40 nomadinjax opened 11 years ago
1
ColdFusion 10 cannot authenticate with login() method

#39 nomadinjax closed 10 years ago
4
Context must be accounted for in cookie paths

#38 nomadinjax closed 11 years ago
1
getSecurity method needs to be public

#37 nomadinjax closed 11 years ago
2
SafeRequest - HTTPParameterName and HTTPParameterValue had hard-coded maxlengths

#36 nomadinjax closed 11 years ago
1
DefaultSecurityConfiguration exception "Complex object types cannot be converted to simple values." Line 265

#35 nomadinjax closed 11 years ago
1
setResourceDirectory value not being picked up

#34 nomadinjax closed 11 years ago
1
DefaultValidator#assertIsValidHTTPRequest - error cookie.getValue(), should be httpCookie variable

#33 nomadinjax closed 11 years ago
1
FileBasedAuthenticator#login - try/catch around isSecureChannel that will never catch

#32 nomadinjax closed 11 years ago
1
Need to allow for resource bundling of validation and other textual messages

#31 nomadinjax closed 10 years ago
3
getValidDate returntype is 'String' - should allow for Date or empty string

#30 nomadinjax closed 11 years ago
2
Allow the Date Validators to accept a min/max value for validation

#29 nomadinjax closed 10 years ago
1
Railo 4 only: Fix 'Could not initialize class org.owasp.esapi.codecs.Base64' error

#28 nomadinjax closed 11 years ago
2
Get valid test cases for 'IntegerAccessReferenceMapTest'

#27 nomadinjax closed 11 years ago
2
Get 'EncoderTest.testEncodeForVBScript' unit test passing

#26 nomadinjax closed 11 years ago
1
Get 'EncoderTest.testEncodeForHTMLAttribute' unit test passing

#25 nomadinjax closed 11 years ago
1
Get 'ExecutorTest.testExecuteWindowsSystemCommand' unit test passing

#24 nomadinjax opened 11 years ago
0
Get 'ExecutorTest.testExecuteSystemCommand' unit test passing

#23 nomadinjax opened 11 years ago
0
Get 'HTTPUtilitiesTest.testGetFileUploads' unit test passing

#22 nomadinjax opened 11 years ago
0
Get 'HTTPUtilitiesTest.testChangeSessionIdentifier' unit test passing

#21 nomadinjax opened 11 years ago
0
None of the 'AccessControllerTest' unit tests are passing

#20 nomadinjax closed 11 years ago
1
Get 'UserTest.testLogout' unit test passing

#19 nomadinjax opened 11 years ago
0
Get 'SafeFileTest.testJavaFileInjectionGood' unit test passing

#18 nomadinjax closed 10 years ago
1
Get 'SafeFileTest.testAlternateDataStream' unit test passing

#17 nomadinjax closed 10 years ago
0
Get 'SafeFileTest.testMultipleJavaFileInjectionBad' unit test passing

#16 nomadinjax closed 10 years ago
0