Commits

Breadcrumbs

History for

onkww-java-html-sanitizer

User selector

All users

All time

Commit History

Commits on Nov 16, 2013

• Minor javadoc correction.

  

  kevin.w.wall@gmail.com

  committed
  f2fb3ec

  Copy full SHA for f2fb3ec

• Added additional CTOR that we needed to be compatible with Throwable.

  

  kevin.w.wall@gmail.com

  committed
  68839c8

  Copy full SHA for 68839c8

• Changes / improvements to comments, including one additional TODO task.

  

  kevin.w.wall@gmail.com

  committed
  5bf451a

  Copy full SHA for 5bf451a

• New file to use Java HTML Sanitizer that implements old AntiSamy policy. Contributed by Mike Samuel.

  

  kevin.w.wall@gmail.com

  committed
  d48e5a6

  Copy full SHA for d48e5a6

• Changes to use Java HTML Sanitizer instead of Antisamy.

  

  kevin.w.wall@gmail.com

  committed
  f881d33

  Copy full SHA for f881d33

Commits on Jul 22, 2012

• 1) Remove unneeded import (bsh.This).

  Show description for 88cb0cf
  

  kevin.w.wall

  committed
  88cb0cf

  Copy full SHA for 88cb0cf

• 1) Fix warnings.

  Show description for ffd2251
  

  kevin.w.wall

  committed
  ffd2251

  Copy full SHA for ffd2251

• 1) Fix warnings in keySet() method.

  Show description for c51e365
  

  kevin.w.wall

  committed
  c51e365

  Copy full SHA for c51e365

Commits on Jun 24, 2012

• Fix Google Issue # 257

  

  kevin.w.wall

  committed
  899e828

  Copy full SHA for 899e828

Commits on Jul 23, 2011

• Get rid of really irritating stacktrace everytime esapi loads.

  Show description for 3d80929
  

  chrisisbeef

  committed
  3d80929

  Copy full SHA for 3d80929

• Resolve issue 232 Validation Type Error

  

  chrisisbeef

  committed
  fd119e4

  Copy full SHA for fd119e4

• Fix issue 231 inverted logic error with canonicalization.

  

  chrisisbeef

  committed
  c770e83

  Copy full SHA for c770e83

Commits on Mar 23, 2011

• Fixed resource loading bug to address broken unit test

  

  chrisisbeef

  committed
  cc705f2

  Copy full SHA for cc705f2

• Fixed bug in getSystemResource when trying to load resource files with no .esapi directory but a esapi directory instead.

  

  chrisisbeef

  committed
  15edfd4

  Copy full SHA for 15edfd4

• Addressing this request: "Another issue that we're facing is addressed in #91. We believe that this extensibility of the DefaultSecurityConfiguration class could be enabled by simply changing the a…

  Show description for a9d476a
  

  manico.james

  committed
  a9d476a

  Copy full SHA for a9d476a

• Resolve potential SQL Injection vulnerability when using the MySQLCodec

  

  chrisisbeef

  committed
  7e41fd9

  Copy full SHA for 7e41fd9

Commits on Mar 22, 2011

• Fix for http://code.google.com/p/owasp-esapi-java/issues/detail?id=215 (using ESAPI exception, not Apache's)

  

  manico.james

  committed
  a93fcd2

  Copy full SHA for a93fcd2

• Google Issue #73. Add check to support / reject lenient dates based on new ESAPI property (Validator.AcceptLenientDates). Default is to reject lenient dates.

  

  kevin.w.wall

  committed
  07d28e6

  Copy full SHA for 07d28e6

• Add check to see if lenient dates accepted in support of Google Issue #73.

  

  kevin.w.wall

  committed
  3cb7cff

  Copy full SHA for 3cb7cff

• Add check to see if lenient dates accepted in support of Google Issue #73.

  

  kevin.w.wall

  committed
  d7101c6

  Copy full SHA for d7101c6

Commits on Mar 1, 2011

• making EventType constructor public

  

  manico.james

  committed
  7e58c75

  Copy full SHA for 7e58c75

Commits on Feb 28, 2011

• Added ValidationErrorList versions of isValid<test> methods. (Issue 209)

  

  steven.van.der.baan@owasp.org

  committed
  83cd2b9

  Copy full SHA for 83cd2b9

Commits on Feb 23, 2011

• cleanup

  

  manico.james

  committed
  0d9b638

  Copy full SHA for 0d9b638

• removing unnecessary import

  

  manico.james

  committed
  b81192a

  Copy full SHA for b81192a

• No longer rejecting input that causes Java Double parsing DOS, not detecting range and returning safe number (throwing proper exception on parse error)

  

  manico.james

  committed
  cc9c3f0

  Copy full SHA for cc9c3f0

• No longer rejecting input that causes Java Double parsing DOS, not detecting range and returning safe number

  

  manico.james

  committed
  af93cff

  Copy full SHA for af93cff

Commits on Feb 16, 2011

• No longer overloading TYPE variable. Now throwing an exception if TYPE is overloaded as a hard coded RegEx.

  

  manico.james

  committed
  7df93e5

  Copy full SHA for 7df93e5

Commits on Feb 12, 2011

• Fix for Google Issue #174.

  

  kevin.w.wall

  committed
  90d76ab

  Copy full SHA for 90d76ab

Commits on Feb 7, 2011

• Clarifying validation message for DOS against Double validation

  

  manico.james

  committed
  321c486

  Copy full SHA for 321c486

Commits on Feb 6, 2011

• Blacklist double validation rule to stop DOS Double parsing

  

  manico.james

  committed
  0963c05

  Copy full SHA for 0963c05

Commits on Feb 4, 2011

• Changes made in response to feedback from NSA and Jeff Walton in regards to Google Issue #81.

  

  kevin.w.wall

  committed
  5a42cf6

  Copy full SHA for 5a42cf6

• Added mandatory audit logging suggested by NSA in feedback to Google Issue #81.

  

  kevin.w.wall

  committed
  1356062

  Copy full SHA for 1356062

• Elaborate on 'IMPORTANT NOTE' comment in source code.

  

  kevin.w.wall

  committed
  c149fd5

  Copy full SHA for c149fd5

• Javadoc changes. Version updated to 20110203. Implemented support for developer selected KDF PRF as per comments per feedback to Google Issue #81.

  

  kevin.w.wall

  committed
  ca61c28

  Copy full SHA for ca61c28

• Javadoc changes. Version updated to 20110203. Implemented support for developer selected KDF PRF as per comments per feedback to Google Issue #81.

  

  kevin.w.wall

  committed
  e747405

  Copy full SHA for e747405