Comments (7)
From chrisisbeef on August 02, 2009 00:41:08
in every container I have worked with the getParameters will return the value
regardless of if they are POST or GET. Perhaps we should look creating a request
wrapper for HttpServletRequest that only returns parms for whatever method the
request was made using.
It definately begs an interesting question - If a form is submitted as a POST, but
someone submits a GET parameter with the same name, which one wins out and is
returned when I call getParameter
from esapi-java-legacy.
From [email protected] on October 26, 2009 23:40:29
The method now calls getParameter. We can add the POST/GET validation later if we
decide so.
Status: Started
Owner: neil.matatall
Labels: OpSys-All Usability
from esapi-java-legacy.
From [email protected] on November 09, 2009 05:39:34
Labels: -Priority-Medium Priority-High Component-Docs Component-Logic
from esapi-java-legacy.
From [email protected] on November 09, 2009 05:40:30
Labels: Milestone-Release2.1
from esapi-java-legacy.
From chrisisbeef on December 01, 2009 23:56:11
Please close out this issue and create a new enhancement request for POST/GET
validation for 2.1
from esapi-java-legacy.
From [email protected] on December 02, 2009 12:40:37
Status: Fixed
Labels: -Milestone-Release2.1
from esapi-java-legacy.
Its a pain when I have a huge JSON in POST and wants to validate using the ESAPI. Do we have anything concrete to validate a heavy json using ESAPI ?
from esapi-java-legacy.
Related Issues (20)
- canonicalize sees entity which isn't there HOT 7
- ESAPI excludes transitive dependency xalan from xom, but does not include it itself HOT 2
- Logs printed using println() are always printed and no option to disable them. HOT 2
- Insecure default signature key length HOT 3
- Change AntiSamy to eventually use SAX parser by default, but allow DOM parser to be used for backward compatibility
- Does esapi-java-legacy support jDK17 HOT 1
- Fix typo in comment in validation.properties files HOT 2
- Option to omit event type prefix in logs HOT 1
- Fix Encoder.encodeForLDAP and Encoder.encodeForDN so they are strictly conformant with Section 3 of RFC 4515 HOT 1
- decode method doesn't work proper for some strings HOT 3
- Revert Dependency Check goal from 'purge' to 'check' once NVD API stops returning 503 'Service Unavailable' errors HOT 1
- DefaultEncoder / getCanonicalizedURI returns mix encoding for HTML special characters HOT 5
- Fix Encoder.getCanonicalizedURI(URI) for the test case of a double-ampersand in the HTML Query HOT 1
- HTMLEntityCodec Mysteriously decodes &or HOT 11
- java.io.FileNotFoundException Error in Logs When ESAPI.properties and validation.properties are in resources. and the application is up ,features are not working. HOT 9
- easpi .properties and validation properties are present but still it is throwing error and the application is failing do you have any solution for this HOT 3
- Validator.isValidSafeHTML() is vulnerable as per CVE-2023-4780 HOT 1
- Validation does not work with esapi jakarta jar HOT 3
- Getting org.owasp.esapi.errors.ConfigurationException: java.lang.reflect.InvocationTargetException Encoder class (org.owasp.esapi.reference.DefaultEncoder) CTOR threw exception. HOT 4
- ConcurrentModificationException HOT 9
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from esapi-java-legacy.