Commits

Breadcrumbs

History for

on2.0_quality

User selector

All users

All time

Commit History

Commits on Oct 24, 2009

• merging WAF work into trunk

  

  manico.james

  committed
  082ba3d

  Copy full SHA for 082ba3d

Commits on Oct 23, 2009

• Merged changes that were made in the trunk into the branch to simplify the RC3 merge

  Show description for 4caf78e
  

  chrisisbeef

  committed
  4caf78e

  Copy full SHA for 4caf78e

Commits on Oct 21, 2009

• Massive changes to comments. Changes to values for properties

  Show description for ee00164
  

  kevin.w.wall

  committed
  ee00164

  Copy full SHA for ee00164

Commits on Sep 6, 2009

• Added comment that AES cipher block size is 16 bytes. (Most block ciphers have block size of 8 bytes.)

  

  kevin.w.wall

  committed
  a50b740

  Copy full SHA for a50b740

Commits on Aug 30, 2009

• Added some more comments to try to clarify things a bit.

  

  kevin.w.wall

  committed
  45bc57f

  Copy full SHA for 45bc57f

Commits on Aug 25, 2009

• New keystore file for DEVELOPMENT only. It is self-signed. Purpose is for jar signing.

  Show description for c0f3ab4
  

  kevin.w.wall

  committed
  c0f3ab4

  Copy full SHA for c0f3ab4

• Summarized crypto changes, added new properties to support new Encryptor encrypt / decrypt methods, briefly explained backward compatibility for Encryptor.

  

  kevin.w.wall

  committed
  e2d8ced

  Copy full SHA for e2d8ced

Commits on Aug 14, 2009

• Updated with new properties in preparation for the new, more general, encryption / decryption

  Show description for 7eec3bb
  

  kevin.w.wall

  committed
  7eec3bb

  Copy full SHA for 7eec3bb

Commits on Aug 7, 2009

• Changed regular expressions for Validator.SystemCommand,

  Show description for 28c53f4
  

  kevin.w.wall

  committed
  28c53f4

  Copy full SHA for 28c53f4

Commits on Jul 28, 2009

• Updated regex for Validator.FileName and Validator.DirectoryName to exclude empty names.

  Show description for af07c15
  

  kevin.w.wall

  committed
  af07c15

  Copy full SHA for af07c15

Commits on Jul 10, 2009

• Move DefaultAccessController to main reference package to hide new design a bit until it's complete.

  

  planetlevel

  committed
  8a50069

  Copy full SHA for 8a50069

Commits on Jul 5, 2009

• Remove all uses of ESAPIRequest/ESAPIResponse (formerly SafeRequest/SafeResponse) from the reference implementation. Request/Response validation options are now either:

  Show description for 8c5ef5a
  

  planetlevel

  committed
  8c5ef5a

  Copy full SHA for 8c5ef5a

Commits on Jul 3, 2009

• Make configuration changes in main branch

  

  planetlevel

  committed
  b969335

  Copy full SHA for b969335

Commits on Jul 2, 2009

• Logging format and consistency improvements (Java logging and Log4J Logging)

  

  planetlevel

  committed
  9031643

  Copy full SHA for 9031643

Commits on Jul 1, 2009

• Add configuration of canonicalization codecs to ESAPI.properties

  

  planetlevel

  committed
  601b551

  Copy full SHA for 601b551

Commits on Jun 26, 2009

• now supporting configurable server IP and application name log settings

  

  manico.james

  committed
  7b1dea9

  Copy full SHA for 7b1dea9

Commits on Jun 25, 2009

• removed duplicate "Authenticator.RememberTokenDuration=14"

  

  manico.james

  committed
  1e83c47

  Copy full SHA for 1e83c47

Commits on Jun 6, 2009

• Get test coverage to 82%

  Show description for 2b76579
  

  planetlevel

  committed
  2b76579

  Copy full SHA for 2b76579

Commits on May 28, 2009

• remove unused keystore files

  

  planetlevel

  committed
  c6f9384

  Copy full SHA for c6f9384

• Change to use AES 256 as the default encryption algorithm

  

  planetlevel

  committed
  9dabe73

  Copy full SHA for 9dabe73

• Major SecurityConfiguration/ESAPI.properties cleanup

  Show description for 0af29da
  

  planetlevel

  committed
  0af29da

  Copy full SHA for 0af29da

Commits on May 21, 2009

• Update Encrytor to use strong crypto policy files from Sun.

  

  planetlevel

  committed
  1f676f6

  Copy full SHA for 1f676f6

Commits on May 19, 2009

• test xss <script>alert('xss')</script>

  

  planetlevel

  committed
  440af03

  Copy full SHA for 440af03

Commits on May 12, 2009

• added sample resource bundle files

  

  singhpawanpreet@gmail.com

  committed
  64cf767

  Copy full SHA for 64cf767

Commits on May 10, 2009

• Add comment about setting UTF-8 across your stack

  

  planetlevel

  committed
  12861c6

  Copy full SHA for 12861c6

• Add comment about keylength and java.policy files

  

  planetlevel

  committed
  dece517

  Copy full SHA for dece517

• Make key length configurable in ESAPI.properties

  

  planetlevel

  committed
  e33f48f

  Copy full SHA for e33f48f

• Added a few comments

  

  planetlevel

  committed
  2549503

  Copy full SHA for 2549503

Commits on Apr 28, 2009

• WAF code not fully integrated yet

  

  planetlevel

  committed
  b551f4f

  Copy full SHA for b551f4f

Commits on Apr 22, 2009

• Make Executor only use approved executables

  Show description for 64e64e3
  

  planetlevel

  committed
  64e64e3

  Copy full SHA for 64e64e3

Commits on Apr 21, 2009

• - Added a note to ESAPI.properties regarding locking down the resources file.

  Show description for 42d1ac2
  

  kfealz@gmail.com

  committed
  42d1ac2

  Copy full SHA for 42d1ac2

• updated esapi.properties with valid default upload location

  

  kfealz@gmail.com

  committed
  51f4cf4

  Copy full SHA for 51f4cf4

Commits on Apr 17, 2009

• Added default upload location to esapi properties.

  Show description for f43b693
  

  kfealz@gmail.com

  committed
  f43b693

  Copy full SHA for f43b693

• updated ESAPI properties to allow multiple characters in various strings.

  

  kfealz@gmail.com

  committed
  75a70ec

  Copy full SHA for 75a70ec

Commits on Apr 16, 2009

• Fixed a ValidatorTest failure that was uncovered by test fixes in change 461 and additional testing in 460:

  Show description for 46932d5
  

  mikehfauzy

  committed
  46932d5

  Copy full SHA for 46932d5