nxbdi owasp-esapi-java issues

nxbdi / owasp-esapi-java

Automatically exported from code.google.com/p/owasp-esapi-java

1 stars 0 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

StringUtilities.union() method is broken, weakens GenerateStrongPassword

#344 GoogleCodeExporter opened 9 years ago
0
isValidInput failing for HTTPParameterValue {internalAction:getScreen}

#343 GoogleCodeExporter opened 9 years ago
1
Duplicates ESAPI_en_US.properties in esapi-2.1.0-dist.zip

#342 GoogleCodeExporter opened 9 years ago
1
Multiple URLs are not supported by Validator.Redirect

#341 GoogleCodeExporter opened 9 years ago
0
Need to update Apache Commons BeanUtils

#340 GoogleCodeExporter opened 9 years ago
0
SecurityConfiguration for ESAPI.Encoder not found in ESAPI.properties. Using default: org.owasp.esapi.reference.DefaultEncoder

#339 GoogleCodeExporter opened 9 years ago
1
ESAPI configuration files not included in dist.

#338 GoogleCodeExporter opened 9 years ago
0
User session just jumped from unknown to 0:0:0:0:0:0:0:1

#337 GoogleCodeExporter opened 9 years ago
1
EncryptedPropertiesUtils Switch for Adding Values

#336 GoogleCodeExporter opened 9 years ago
0
HTTPParameterValue

#335 GoogleCodeExporter opened 9 years ago
0
HttpParamtervalue for allowing Xml Data

#334 GoogleCodeExporter opened 9 years ago
0
-Log4JLogger.java doesn't output correct file & line number-Similar issue as reported in Issue 268

#333 GoogleCodeExporter opened 9 years ago
0
Performance

#332 GoogleCodeExporter opened 9 years ago
3
Regex in ESAPI.properties is not considering few of the french characters

#331 GoogleCodeExporter opened 9 years ago
2
[deleted issue]

#330 GoogleCodeExporter closed 9 years ago
0
logger is gettin class cast exception

#329 GoogleCodeExporter opened 9 years ago
0
Content Security Policy - Java Servlet Filter

#328 GoogleCodeExporter opened 9 years ago
0
Log4j configuration with no root level causes NPE in Log4jLogger.java

#327 GoogleCodeExporter closed 9 years ago
1
setHeader blocks legitimate headers due to header name size limit being too low

#326 GoogleCodeExporter opened 9 years ago
0
AbstractAccessReferenceMap.addDirectReference not invariant

#325 GoogleCodeExporter opened 9 years ago
0
[deleted issue]

#324 GoogleCodeExporter closed 9 years ago
0
StringUtils.union broken which has minor impact on CSRF Protection and random file name generation

#323 GoogleCodeExporter closed 9 years ago
7
Construct "&" in Validator.URL is simple character class, not reference to ampersand

#322 GoogleCodeExporter opened 9 years ago
0
Patch for /trunk/src/main/java/org/owasp/esapi/codecs/HTMLEntityCodec.java

#321 GoogleCodeExporter closed 9 years ago
1
ClassCastException on SecurityWrapperResponse

#320 GoogleCodeExporter opened 9 years ago
0
ClassCastException during web application redeploy due to the grift logging classes

#319 GoogleCodeExporter opened 9 years ago
1
PolicyFactory Sanitize method weird output

#318 GoogleCodeExporter opened 9 years ago
1
RequestRateThrottleFilter may not work as expected with hits=1 or hits=2

#317 GoogleCodeExporter opened 9 years ago
5
Unsynchronized get method, synchronized set method

#316 GoogleCodeExporter opened 9 years ago
1
Incorrect lazy initialization of static field instance

#315 GoogleCodeExporter closed 9 years ago
1
Resource leak: FileInputStream is not closed on method exit

#314 GoogleCodeExporter opened 9 years ago
1
Incorrect Equality test on floating point values

#313 GoogleCodeExporter opened 9 years ago
1
Resource leak: This FileReader is not closed on method exit

#312 GoogleCodeExporter opened 9 years ago
0
Deprecate current HttpUtilities.setRememberToken() and replace with one not requiring user password

#311 GoogleCodeExporter opened 9 years ago
0
ValidatorTest.testIsValidDate fails if default locale is not US

#310 GoogleCodeExporter opened 9 years ago
2
ESAPI.properties file not being built / deployed as part of production downloads

#309 GoogleCodeExporter opened 9 years ago
5
[deleted issue]

#308 GoogleCodeExporter closed 9 years ago
0
Insecure default configuration for Executor.ApprovedExecutables in ESAPI.properties file

#307 GoogleCodeExporter closed 9 years ago
1
Crypto MAC by-pass makes default ESAPI symmetric encrytion using CBC mode vulnerable to padding oracle attacks

#306 GoogleCodeExporter closed 9 years ago
14
Double checked locking on Log4JLogFactory.getInstance()

#305 GoogleCodeExporter opened 9 years ago
1
Make HTMLValidationRule to look for antisamy-esapi.xml in classpaths

#304 GoogleCodeExporter opened 9 years ago
1
Eliminate eclipse code warnings to improve quality

#303 GoogleCodeExporter opened 9 years ago
0
AuthenticatedUser isCredentialsNonExpired() have todo comment, but default return false;

#302 GoogleCodeExporter opened 9 years ago
0
Issue with decodeFromURL method in the DefaultEncoder

#301 GoogleCodeExporter opened 9 years ago
0
Canonicaling "%Device% changes the meaning of the input string

#300 GoogleCodeExporter opened 9 years ago
0
ClassCastException when using ESAPI logger

#299 GoogleCodeExporter opened 9 years ago
3
encodeForCSS brakes color values

#298 GoogleCodeExporter opened 9 years ago
0
HTMLEntityCodec destroys 32-bit CJK (Chinese, Japanese and Korean) characters

#297 GoogleCodeExporter opened 9 years ago
1
HTMLEntityCodec#decode incorrectly decodes upper-case accented letters as their lower-case counterparts

#296 GoogleCodeExporter opened 9 years ago
0
encodeForHTMLAttribute escapes the forward slash

#295 GoogleCodeExporter opened 9 years ago
0