slocumbf / owasp-esapi-java

Automatically exported from code.google.com/p/owasp-esapi-java
0 stars 0 forks source link

Some default ESAPI.properties Validator patterns only allow one character #11

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
The default ESAPI.properties has some validation patterns that only allow 
one character. :

Validator.HTTPServerName=^[a-zA-Z0-9_.\\-]$
Validator.HTTPContextPath=^[a-zA-Z0-9.\\-_]$
Validator.HTTPPath=^[a-zA-Z0-9.\\-_]$
Validator.HTTPQueryString=^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ ]$
Validator.HTTPURI=^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ ]$

We needed to add a quantifier to each defined character class to support 
more characters.

Original issue reported on code.google.com by Calico...@gmail.com on 15 Jan 2009 at 4:07

GoogleCodeExporter commented 9 years ago

Original comment by kfe...@gmail.com on 17 Apr 2009 at 2:32

GoogleCodeExporter commented 9 years ago

Original comment by kfe...@gmail.com on 17 Apr 2009 at 3:14