ESAPI 2.5.3.1 is now avaiable #819
kwwall
announced in
Announcements
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
ESAPI 2.5.3.1 is a minor point release based on the recent 2.5.3.0 release that adds:
Validator.isValidSafeHTMLandValidationRule.getValidmethods.isValidSafeHTMLmethods is invoked. The warning notes that the method is deprecated and provides a link to the GitHub Security Advisory. The warning message itself looks something like this:The rationale for this point release was to add the logging so that if ESAPI logs are sent to your SIEM, it provides a message to set up an alert / trigger for. Also, we added clarifying Javadoc for the 2
Validator.isValidSafeHTML methods and corrected the ESAPI property name actually used byValidationRule.getValid.You may find this release at https://github.com/ESAPI/esapi-java-legacy/releases/tag/esapi-2.5.3.1
Beta Was this translation helpful? Give feedback.
All reactions