added new core HTTP validation attributes

manico.james · manico.james · commit 03bc406570cf · 2011-02-03T02:43:49.000Z
diff --git a/src/main/resources/ESAPI.properties b/src/main/resources/ESAPI.properties
@@ -54,6 +54,16 @@ Validator.Redirect=^\\/test.*$
 
 # Global HTTP Validation Rules
 # Values with Base64 encoded data (e.g. encrypted state) will need at least [a-zA-Z0-9\/+=]
+
+Validator.HTTPScheme=^(http|https)$
+Validator.HTTPServerName=^[a-zA-Z0-9_.\\-]*$
+Validator.HTTPContextPath=^[a-zA-Z0-9.\\-\\/_]*$
+Validator.HTTPServletPath=^[a-zA-Z0-9.\\-\\/_]*$
+Validator.HTTPPath=^[a-zA-Z0-9.\\-_]*$
+Validator.HTTPQueryString=^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ %]*$
+Validator.HTTPURI=^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ ]*$
+Validator.HTTPURL=^.*$
+Validator.HTTPJSESSIONID=^[A-Z0-9]{10,30}$
 Validator.HTTPParameterName=^[a-zA-Z0-9_]{0,32}$
 Validator.HTTPParameterValue=^[a-zA-Z0-9.\\-\\/+=_ ]*$
 Validator.HTTPCookieName=^[a-zA-Z0-9\\-_]{0,32}$
