The default ESAPI.properties has some validation patterns that only allow
one character. :
Validator.HTTPServerName=^[a-zA-Z0-9_.\\-]$
Validator.HTTPContextPath=^[a-zA-Z0-9.\\-_]$
Validator.HTTPPath=^[a-zA-Z0-9.\\-_]$
Validator.HTTPQueryString=^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ ]$
Validator.HTTPURI=^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ ]$
We needed to add a quantifier to each defined character class to support
more characters.
Original issue reported on code.google.com by Calico...@gmail.com on 15 Jan 2009 at 4:07
Original issue reported on code.google.com by
Calico...@gmail.com
on 15 Jan 2009 at 4:07