Skip to content

Issues: ESAPI/esapi-java-legacy

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

115 Open 446 Closed
115 Open 446 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

ESAPI excludes transitive dependency xalan from xom, but does not include it itself bug
#795 opened Aug 14, 2023 by in-fke
2
canonicalize sees entity which isn't there bug
#794 opened Aug 5, 2023 by bardware
6
Context should also be logged in HTMLValidationRule Component-Validator enhancement
#793 opened Jul 28, 2023 by kwwall
@kwwall
Fix Javadoc code example in ValidationErrorList bug good first issue javadoc
#788 opened Jun 17, 2023 by kwwall
HTTPUtilities needs its Javadoc seriously reworked bug good first issue javadoc Priority-Low
#783 opened Apr 7, 2023 by kwwall
Javadoc needs updated to correct links to OWASP ESAPI wiki page bug Component-Docs javadoc Priority-Low
#781 opened Apr 1, 2023 by kwwall
@kwwall
1
ESAPI is not returning right logger level bug
#780 opened Mar 22, 2023 by SalmanMohammedTR
6
Perform Release Release Steps Perform release steps
#752 opened Oct 22, 2022 by kwwall
@kwwall
ESAPI.securityConfiguration().setResourceDirectory(...) not considered anymore in loading of configuration via classloader bug Configuration
#746 opened Oct 10, 2022 by nettermensch
@kwwall
Properties and properties files that are required, even if esapi logging is not used enhancement
#742 opened Sep 11, 2022 by davidmichaelkarr
3
Random GUIDs and UUID, and Randomizer.java bug Component-Randomizer Priority-Low
#737 opened Aug 22, 2022 by kwwall
@kwwall
3
EncryptedPropertiesUtilsTest.testCreateNew:93 » UnsupportedOperation This method has been removed for security. bug
#721 opened Jul 17, 2022 by noloader
16
Consider additional logging whenever ECB or other designated weak cipher modes modes used for encryption / decryption. Component-Encryptor enhancement
#718 opened Jul 16, 2022 by kwwall
@kwwall
DefaultRandomizer.java use SecureRandom.getInstance(algorithm) to get SecureRandom instance Generating pseudo-random numbers bug Java 1.8
#668 opened Mar 18, 2022 by JerryDevis
12
PercentCodec performs destructive decoding of valid UTF-8 byte sequences
#667 opened Mar 15, 2022 by Aakash4396
32
add OSGI metadata enhancement good first issue
#661 opened Feb 23, 2022 by zspitzer
23
Fix code scanning alert - tracker 3
#651 opened Jan 10, 2022 by kwwall
1 task
@kwwall
1
Fix code scanning alert - Use of a broken or risky cryptographic algorithm - HMacSHA1
#650 opened Jan 10, 2022 by kwwall
1 task
@kwwall
when i call the api 'ESAPI.validator().getValidSafeHTML' with mixed encoding input, the mixed input willed be filtered.
#645 opened Dec 3, 2021 by wangyun2018
9
Create package.html Javadoc files for ESAPI packages where it is missing Component-Docs good first issue
#615 opened Mar 27, 2021 by kwwall
FindSecBugs errors: Unable to call org/owasp/esapi/ESAPI.securityConfiguration() Build-Maven
#613 opened Mar 23, 2021 by davewichers
3
Apply Surefire JVM Isolation to Maven Test execution Build-CI Build-Maven
#604 opened Mar 8, 2021 by jeremiahjstacey
1
Need to clean up logging related code in ESAPI's WAF Component-Logger Component-WAF General Code Cleanup Remove deprecated methods or fields, re-formatting, etc. good first issue
#595 opened Feb 19, 2021 by kwwall
Separating codecs and canonicalization functionality into a separate maven artifact
#582 opened Dec 9, 2020 by forgedhallpass
6
ESAPI's default regex for HeaderValue has a minus-sign bug
#579 opened Nov 11, 2020 by xeno6696
@xeno6696
18
ProTip! Add no:assignee to see everything that’s not assigned.