search

nomadinjax / esapi4cf

If anyone is interested in taking over this project please let me know! I no longer have the time to commit to it as my role has changed much since I took this over. This project deserves someone who can devote the necessary time to it! OWASP Enterprise Security API (ESAPI) for ColdFusion/CFML Project
http://damonmiller.github.io/esapi4cf/
BSD 3-Clause "New" or "Revised" License
37 stars 10 forks source link

setResourceDirectory value not being picked up #34

Closed nomadinjax closed 11 years ago

nomadinjax commented 11 years ago

In Railo, watching the console you can see the ESAPI.properties file loaded by ESAPI4CF initially is part of Railo server. Once you call setResourceDirectory() you can then see the 'attempt' to reload resources but the Railo server one is once again used.

The order in which the resource locations are checked needs verify the value of setResourceDirectory() first, and only if that is unavailable fallback on others.

nomadinjax commented 11 years ago

Moved the resource check for the setResourceDirectory first (it was second). Resolved in 1.0.1a.