If the passed in configuration file name has neither a suffix of ".properties" or ".xml", then this is thrown:
throw new ConfigurationException("Configuration storage type [" + fileExtension + "] is not " +
"supported");
This exception message does not clearly convey what is expected for the ESAPI client to do to make it work.
Describe the solution you'd like
Replace the current code, shown above, with something similar to this:
throw new ConfigurationException("Configuration path of [" + cfgPath + "] has unsupported file suffix." +
"Only .properties or .xml file suffix is supported.");