Comments (5)
From [email protected] on October 17, 2009 09:58:22
Ooops... enter in the summary line submits the whole thing....
The attached patch adds missing tags for other encoding methods (though not ldap, sql
or os) and EL functions for encoding methods.
trunk-taglib-enhancements-i36-i37.patch.gz
if issue 36 and issue 37 patches have been applied
trunk-taglib-enhancements.patch.gz
from current trunk ( revision 700 ) including patches in issue 36 and issue 37 details:
add throws JspTagException to BaseCodeTag#encode so subclass can throw
exceptions
add ELEncodeFunctions class
provides public static methods that call ESAPI.encoder() methods
allows for EL functions in new taglib
add tags for missing & useful encoding:
EncodeForBase64Tag
EncodeForCSSTag
EncodeForURLTag
EncodeForXMLAttributeTag
EncodeForXMLTag
EncodeForXPathTag
rename EncodeForHTMLJavasSript to EncodeForJavaScript
previous name was inaccurate and confusing
minor javadoc fixes
EncodeForHTMLAttributeTag
EncodeForHTMLTag
EncodeForJavaScriptTag
EncodeForVBScriptTag
esapi.tld:
update from JSP spec 1.1 DTD to JSP spec 2.0 xml schema
required for EL functions
add descriptions
add new tags
add EL functions
Attachment: trunk-taglib-enhancements-i36-i37.patch.gz trunk-taglib-enhancements.patch.gz
from esapi-java-legacy.
From chrisisbeef on October 22, 2009 21:17:10
I will review after RC3 for inclusion in 2.0 final
Owner: chrisisbeef
from esapi-java-legacy.
From chrisisbeef on October 28, 2009 22:12:33
Labels: Milestone-Release2.0
from esapi-java-legacy.
From [email protected] on November 02, 2009 14:47:58
Update patch now that issue 36 has been fixed. This patch assumes that the issue 37 patch has already been applied.
Attachment: trunk-taglib-enhancements-i37.patch.gz
from esapi-java-legacy.
From [email protected] on November 04, 2009 11:37:59
Patch applied in revision 745 & 746
Status: Fixed
Cc: [email protected]
from esapi-java-legacy.
Related Issues (20)
- Fix Javadoc code example in ValidationErrorList
- ั ะท HOT 1
- Context should also be logged in HTMLValidationRule
- canonicalize sees entity which isn't there HOT 7
- ESAPI excludes transitive dependency xalan from xom, but does not include it itself HOT 2
- Logs printed using println() are always printed and no option to disable them. HOT 2
- Insecure default signature key length HOT 3
- Change AntiSamy to eventually use SAX parser by default, but allow DOM parser to be used for backward compatibility
- Does esapi-java-legacy support jDK17 HOT 1
- Fix typo in comment in validation.properties files HOT 2
- Option to omit event type prefix in logs HOT 1
- Fix Encoder.encodeForLDAP and Encoder.encodeForDN so they are strictly conformant with Section 3 of RFC 4515 HOT 1
- decode method doesn't work proper for some strings HOT 3
- Revert Dependency Check goal from 'purge' to 'check' once NVD API stops returning 503 'Service Unavailable' errors HOT 1
- DefaultEncoder / getCanonicalizedURI returns mix encoding for HTML special characters HOT 5
- Fix Encoder.getCanonicalizedURI(URI) for the test case of a double-ampersand in the HTML Query HOT 1
- HTMLEntityCodec Mysteriously decodes &or HOT 11
- java.io.FileNotFoundException Error in Logs When ESAPI.properties and validation.properties are in resources. and the application is up ,features are not working. HOT 9
- easpi .properties and validation properties are present but still it is throwing error and the application is failing do you have any solution for this HOT 3
- Validator.isValidSafeHTML() is vulnerable as per CVE-2023-4780 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. ๐๐๐
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google โค๏ธ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from esapi-java-legacy.