Commits

Breadcrumbs

History for

on2.1-crypto

User selector

All users

All time

Commit History

Commits on Jan 1, 2011

• Resolve Issue #166. Rename '.esapi' directories to 'esapi' and change src/util/esapi-release.sh accordingly.

  

  kevin.w.wall

  committed
  614189f

  Copy full SHA for 614189f

Commits on Dec 28, 2010

• Corresponding unit test changes made because restrictions to regex added to CryptoToken.setUserAccountName(String).

  

  kevin.w.wall

  committed
  865ea4b

  Copy full SHA for 865ea4b

• Changed to setUserAccountName() to ensure that username conforms to regex [a-z][a-z0-9.@-]+ after being converted to lower case.

  

  kevin.w.wall

  committed
  27c3e7d

  Copy full SHA for 27c3e7d

• JUnit test for CrytpoToken.

  

  kevin.w.wall

  committed
  fbca231

  Copy full SHA for fbca231

• Provides a secure, cryptographic token. Initial revision.

  

  kevin.w.wall

  committed
  da4fd37

  Copy full SHA for da4fd37

Commits on Dec 1, 2010

• Javadoc fixes.

  

  kevin.w.wall

  committed
  eadea27

  Copy full SHA for eadea27

Commits on Nov 23, 2010

• Fixed typo in variable name: EVENT_UNSPECIFED -> EVENT_UNSPECIFIED

  

  augustd

  committed
  4b6f418

  Copy full SHA for 4b6f418

• Added several comments. Clarified some assertion error messages.

  

  kevin.w.wall

  committed
  c765c8b

  Copy full SHA for c765c8b

Commits on Nov 21, 2010

• Change javadoc to remove references to long defunct LegacyJavaEncryptor.

  

  kevin.w.wall

  committed
  3a41ff1

  Copy full SHA for 3a41ff1

Commits on Nov 17, 2010

• Made changes to authenticator verify password strength method to take a User object as an arg so we can validate the pw != username. method sig changed from

  Show description for e022dd2
  

  jtmelton

  committed
  e022dd2

  Copy full SHA for e022dd2

Commits on Nov 16, 2010

• - made ConfigurationException extend EnterpriseSecurityException and made the necessary upgrades throughout the config parsing code to support that

  Show description for 6a7f6ba
  

  arshan.dabirsiaghi

  committed
  6a7f6ba

  Copy full SHA for 6a7f6ba

Commits on Nov 10, 2010

• Modified HTTPQueryString validation rule so that unit tests would pass. Also made changes to comments (only) to reduce the number of differences between the live and test versions of ESAPI.properties

  Show description for d47648c
  

  augustd

  committed
  d47648c

  Copy full SHA for d47648c

Commits on Nov 9, 2010

• Minor update to getContextPath() so that the empty String "" will be returned instead of null if the context path is ROOT

  Show description for 77fb568
  

  augustd

  committed
  77fb568

  Copy full SHA for 77fb568

Commits on Nov 7, 2010

• In revision 1642 the Validator.Email regular expression in validation.properties was changed to add a single quote (aside: news to me that a single quote is a valid character in this context). Howe…

  Show description for 31adc92
  

  kevin.w.wall

  committed
  31adc92

  Copy full SHA for 31adc92

• Changed check that examines if password matches account name to use String.equalsIgnoresCase() rather than just String.equals().

  

  kevin.w.wall

  committed
  e6a07db

  Copy full SHA for e6a07db

Commits on Nov 6, 2010

• Fixed new input validation unit tests.

  

  manico.james

  committed
  9049eb2

  Copy full SHA for 9049eb2

• Updating test to reflect new assumption that '*' is valid character in url parameters

  

  chrisisbeef

  committed
  708cb32

  Copy full SHA for 708cb32

• Changing validation regexs per google code issue #116

  

  chrisisbeef

  committed
  0635893

  Copy full SHA for 0635893

Commits on Nov 5, 2010

• fixed http://code.google.com/p/owasp-esapi-java/issues/detail?id=173 by moving 2 access control files from test to main

  

  manico.james

  committed
  f053ae1

  Copy full SHA for f053ae1

• Moved configuration for session ID name from being hardcoded as JSESSIONID to being a configurable property in ESAPI.properties.

  

  jtmelton

  committed
  9fc5704

  Copy full SHA for 9fc5704

Commits on Nov 4, 2010

• Made update to fix bug http://code.google.com/p/owasp-esapi-java/issues/detail?id=108. This required denying a password that matches the account name. Also added a test to the AuthenticatorTest t…

  Show description for 1079948
  

  jtmelton

  committed
  1079948

  Copy full SHA for 1079948

• Made change to each file to allow Validator.Email support emails with apostrophes included.

  

  jtmelton

  committed
  d8a3c2e

  Copy full SHA for d8a3c2e

• Added a few tests to verify changes to HTTPParameterValue and to Email regexes, to ensure the changes function as intended.

  

  jtmelton

  committed
  4ab8006

  Copy full SHA for 4ab8006

• Fixed the javadoc to apply single quotes per oracle example.

  

  jtmelton

  committed
  536b173

  Copy full SHA for 536b173

• Added saveUsers to changePassword method to resolve http://code.google.com/p/owasp-esapi-java/issues/detail?id=13 bug

  

  jtmelton

  committed
  6c7eaf0

  Copy full SHA for 6c7eaf0

• Added @ character to default validation rule for HTTP Parameters (Validator.HTTPParameterValue)

  Show description for 2791592
  

  augustd

  committed
  2791592

  Copy full SHA for 2791592

Commits on Nov 3, 2010

• Updated TEST version of ESAPI.properties to include new properties from my past few checkins.

  

  augustd

  committed
  914cd66

  Copy full SHA for 914cd66

Commits on Nov 2, 2010

• Fix for SecurityWrapperRequest.getContextPath() throwing IntrusionException when application is deployed at the ROOT path

  Show description for 9e273d3
  

  augustd

  committed
  9e273d3

  Copy full SHA for 9e273d3

Commits on Nov 1, 2010

• Applying http://code.google.com/p/owasp-esapi-java/issues/detail?id=139 to stop race condition

  

  manico.james

  committed
  fd80a61

  Copy full SHA for fd80a61

Commits on Oct 29, 2010

• Small change to DefaultSecurityConfiguration.loadConfiguration() to force reloading of validation patterns in validation.properties

  Show description for d80d142
  

  augustd

  committed
  d80d142

  Copy full SHA for d80d142

• Modified DefaultEncoder to respect the Encoder.AllowMultipleEncoding property in ESAPI.properties; Added new property Encoder.AllowMixedEncoding

  Show description for d49f8fb
  

  augustd

  committed
  d49f8fb

  Copy full SHA for d49f8fb

Commits on Oct 26, 2010

• Initial version of the DB2 encoder

  

  manico.james

  committed
  f9d01ae

  Copy full SHA for f9d01ae

• Initial version of the DB2 encoder

  

  manico.james

  committed
  cf0835d

  Copy full SHA for cf0835d

Commits on Oct 24, 2010

• Bug fix to correct package name for JavaEncryptor. Bug reported by Nishi Kumar.

  

  kevin.w.wall

  committed
  500bdc8

  Copy full SHA for 500bdc8

• Javadoc fix to correct package name of JavaEncryptor. (Issue identified by Nishi Kumar.)

  

  kevin.w.wall

  committed
  07b92c1

  Copy full SHA for 07b92c1