vidyuthd owasp-esapi-java issues

vidyuthd / owasp-esapi-java

Automatically exported from code.google.com/p/owasp-esapi-java

0 stars 0 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Incorrect import in HTMLValidationRule

#215 GoogleCodeExporter closed 9 years ago
1
DecodeFromURL fails when the input is "%" (without quotes)

#214 GoogleCodeExporter opened 9 years ago
0
HTTPUtilities.getFileUploads(...) does not allow access to other form posted parameters (FileItem form fields).

#213 GoogleCodeExporter opened 9 years ago
3
IntrusionException should extend EnterpriseRuntimeException

#212 GoogleCodeExporter opened 9 years ago
1
Logger.EventType should have a public constructor

#211 GoogleCodeExporter closed 9 years ago
2
Error with URL RegEx

#210 GoogleCodeExporter opened 9 years ago
2
adding ValidationErrorList variant to the "is" checks in the validator

#209 GoogleCodeExporter closed 9 years ago
2
Patch for /tags/releases/2.0_rc10/src/main/java/org/owasp/esapi/reference/DefaultUser.java

#208 GoogleCodeExporter closed 9 years ago
1
Misc bug fixes in DefaultSecurityConfiguration

#207 GoogleCodeExporter closed 9 years ago
3
Changes to DefaultSecurityConfiguration to look in 'esapi' directories.

#206 GoogleCodeExporter closed 9 years ago
1
DefaultSecurityConfiguration.getInstance causes NullPointerException when ESAPI.properties doesn't exist

#205 GoogleCodeExporter closed 9 years ago
1
Provide a taglib descriptor (.tld file)

#204 GoogleCodeExporter opened 9 years ago
3
Provide a tag lib descriptor (.tld file)

#203 GoogleCodeExporter opened 9 years ago
0
Change default HTTPHeaderValue in ESAPI.properties to also match If-None-Match header

#202 GoogleCodeExporter opened 9 years ago
1
Build an encoding function specific to HTTP/Response Splitting (tactical remediation)

#201 GoogleCodeExporter opened 9 years ago
0
Build an encoding function specific to HTTP/Response Splitting (tactical remediation)

#200 GoogleCodeExporter opened 9 years ago
1
Please improve efficiency of string-building code

#199 GoogleCodeExporter opened 9 years ago
2
Revise CryptoHelper.computeDerivedKeys() in accordance with review recommendations

#198 GoogleCodeExporter closed 9 years ago
2
[deleted issue]

#197 GoogleCodeExporter closed 9 years ago
0
Need encoder for LDAP Interchange Format (LDIF)

#196 GoogleCodeExporter opened 9 years ago
1
BaseValidationRule.assertValid(String context, String input) causes NPE if input is not valid.

#195 GoogleCodeExporter opened 9 years ago
4
DefalutValidator.isValidSafeHTML() doesn't work

#194 GoogleCodeExporter opened 9 years ago
12
CipherTextSerializer.java - Assertions

#193 GoogleCodeExporter closed 9 years ago
1
Change the ".esapi" folder to "esapi"

#192 GoogleCodeExporter closed 9 years ago
2
getValidDirectoryPath needs to verify canonicalization better

#191 GoogleCodeExporter closed 9 years ago
1
DefaultHttpUtilities.sendRedirect should throw AccessControlException, not IOException

#190 GoogleCodeExporter opened 9 years ago
2
login() should not require POST method if user is found in session

#189 GoogleCodeExporter opened 9 years ago
0
UnInitialized esapi logging assumes logging to System.out/System.err - Make configurable/extensible

#188 GoogleCodeExporter opened 9 years ago
4
not able to encode/validate Windows style paths

#187 GoogleCodeExporter opened 9 years ago
1
Split ESAPI into Components

#186 GoogleCodeExporter opened 9 years ago
0
Unit test code for taglibs

#185 GoogleCodeExporter opened 9 years ago
1
Bug found in union() method of EncoderConstants class.

#184 GoogleCodeExporter closed 9 years ago
2
Add BoundedBufferedReader class to prevent readLine DoS

#183 GoogleCodeExporter opened 9 years ago
3
Sign and Seal ESAPI JAR

#182 GoogleCodeExporter opened 9 years ago
2
Develop SecurityManager class

#181 GoogleCodeExporter opened 9 years ago
3
Consider tamper resistant audit log

#180 GoogleCodeExporter opened 9 years ago
2
Storing encryption keys in a separate key vault

#179 GoogleCodeExporter opened 9 years ago
2
SecurityWrapperRequest seems to mishandle/swallow allowNull argument

#178 GoogleCodeExporter opened 9 years ago
3
Add new "audit" log level that ALWAYS get's logged

#177 GoogleCodeExporter closed 9 years ago
2
Please migrate the WAF to using the ESAPI logging mechanism

#176 GoogleCodeExporter closed 9 years ago
1
Please migrate the WAF to using the ESAPI logging mechanism

#175 GoogleCodeExporter closed 9 years ago
1
JSESSIONID is hard-coded in WAF files

#174 GoogleCodeExporter closed 9 years ago
4
AccessControlPolicy.xml configuration

#173 GoogleCodeExporter closed 9 years ago
1
Break up HTTPUtilities into several classes per SRP

#172 GoogleCodeExporter opened 9 years ago
3
Broken links to ESAPI-User mailinglist

#171 GoogleCodeExporter closed 9 years ago
3
Need major changes to configuration mechanism

#170 GoogleCodeExporter opened 9 years ago
5
Need a new filter for browser security response headers

#169 GoogleCodeExporter opened 9 years ago
7
SecurityWrapperRequest.getContextPath() throws IntrusionException when application is deployed at the ROOT path

#168 GoogleCodeExporter closed 9 years ago
2
XSS Filter for consideration

#167 GoogleCodeExporter closed 9 years ago
1
Rename .esapi directories and document changes

#166 GoogleCodeExporter closed 9 years ago
2

Previous Next