Skip to content

Issues: ESAPI/esapi-java-legacy

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

119 Open 463 Closed
119 Open 463 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Getting org.owasp.esapi.errors.ConfigurationException: java.lang.reflect.InvocationTargetException Encoder class (org.owasp.esapi.reference.DefaultEncoder) CTOR threw exception. bug
#838 opened Apr 17, 2024 by PriyatamaB
4
Revert Dependency Check goal from 'purge' to 'check' once NVD API stops returning 503 'Service Unavailable' errors bug Build-Maven Priority-High
#815 opened Nov 24, 2023 by kwwall
@kwwall
1
decode method doesn't work proper for some strings bug Priority-Low
#814 opened Nov 24, 2023 by mukesh4804
3
Option to omit event type prefix in logs enhancement
#811 opened Nov 20, 2023 by RodolfoAndre
1
Change AntiSamy to eventually use SAX parser by default, but allow DOM parser to be used for backward compatibility enhancement
#800 opened Sep 30, 2023 by kwwall
@kwwall
ESAPI excludes transitive dependency xalan from xom, but does not include it itself bug
#795 opened Aug 14, 2023 by in-fke
2
Context should also be logged in HTMLValidationRule Component-Validator enhancement
#793 opened Jul 28, 2023 by kwwall
@kwwall
Fix Javadoc code example in ValidationErrorList bug good first issue javadoc
#788 opened Jun 17, 2023 by kwwall
HTTPUtilities needs its Javadoc seriously reworked bug good first issue javadoc Priority-Low
#783 opened Apr 7, 2023 by kwwall
Javadoc needs updated to correct links to OWASP ESAPI wiki page bug Component-Docs javadoc Priority-Low
#781 opened Apr 1, 2023 by kwwall
@kwwall
1
ESAPI is not returning right logger level bug
#780 opened Mar 22, 2023 by SalmanMohammedTR
6
Perform Release Release Steps Perform release steps
#752 opened Oct 22, 2022 by kwwall
@kwwall
ESAPI.securityConfiguration().setResourceDirectory(...) not considered anymore in loading of configuration via classloader bug Configuration
#746 opened Oct 10, 2022 by nettermensch
@kwwall
Properties and properties files that are required, even if esapi logging is not used enhancement
#742 opened Sep 11, 2022 by davidmichaelkarr
3
Random GUIDs and UUID, and Randomizer.java bug Component-Randomizer Priority-Low
#737 opened Aug 22, 2022 by kwwall
@kwwall
3
EncryptedPropertiesUtilsTest.testCreateNew:93 » UnsupportedOperation This method has been removed for security. bug
#721 opened Jul 17, 2022 by noloader
16
Consider additional logging whenever ECB or other designated weak cipher modes modes used for encryption / decryption. Component-Encryptor enhancement
#718 opened Jul 16, 2022 by kwwall
@kwwall
DefaultRandomizer.java use SecureRandom.getInstance(algorithm) to get SecureRandom instance Generating pseudo-random numbers bug Java 1.8
#668 opened Mar 18, 2022 by JerryDevis
12
PercentCodec performs destructive decoding of valid UTF-8 byte sequences
#667 opened Mar 15, 2022 by Aakash4396
32
add OSGI metadata enhancement good first issue
#661 opened Feb 23, 2022 by zspitzer
23
Fix code scanning alert - tracker 3
#651 opened Jan 10, 2022 by kwwall
1 task
@kwwall
1
Fix code scanning alert - Use of a broken or risky cryptographic algorithm - HMacSHA1
#650 opened Jan 10, 2022 by kwwall
1 task
@kwwall
2
when i call the api 'ESAPI.validator().getValidSafeHTML' with mixed encoding input, the mixed input willed be filtered.
#645 opened Dec 3, 2021 by wangyun2018
9
Create package.html Javadoc files for ESAPI packages where it is missing Component-Docs good first issue
#615 opened Mar 27, 2021 by kwwall
FindSecBugs errors: Unable to call org/owasp/esapi/ESAPI.securityConfiguration() Build-Maven
#613 opened Mar 23, 2021 by davewichers
3
ProTip! Find all open issues with in progress development work with linked:pr.