Commits

Branch selector

 2.1-crypto

User selector

All users

All time

Commit History

Commits on Jan 2, 2011

• Dev branch for Kevin Wall's work on extended crypto features for release 2.1

  

  kevin.w.wall

  committed
  876fa3e

  Copy full SHA for 876fa3e

Commits on Jan 1, 2011

• Resolve Issue #166. Rename '.esapi' directories to 'esapi' and change src/util/esapi-release.sh accordingly.

  

  kevin.w.wall

  committed
  614189f

  Copy full SHA for 614189f

Commits on Dec 28, 2010

• Corresponding unit test changes made because restrictions to regex added to CryptoToken.setUserAccountName(String).

  

  kevin.w.wall

  committed
  865ea4b

  Copy full SHA for 865ea4b

• Changed to setUserAccountName() to ensure that username conforms to regex [a-z][a-z0-9.@-]+ after being converted to lower case.

  

  kevin.w.wall

  committed
  27c3e7d

  Copy full SHA for 27c3e7d

• JUnit test for CrytpoToken.

  

  kevin.w.wall

  committed
  fbca231

  Copy full SHA for fbca231

• Provides a secure, cryptographic token. Initial revision.

  

  kevin.w.wall

  committed
  da4fd37

  Copy full SHA for da4fd37

Commits on Dec 1, 2010

• Javadoc fixes.

  

  kevin.w.wall

  committed
  eadea27

  Copy full SHA for eadea27

Commits on Nov 23, 2010

• Fixed typo in variable name: EVENT_UNSPECIFED -> EVENT_UNSPECIFIED

  

  augustd

  committed
  4b6f418

  Copy full SHA for 4b6f418

• Added several comments. Clarified some assertion error messages.

  

  kevin.w.wall

  committed
  c765c8b

  Copy full SHA for c765c8b

• Regenerated from corresponding updated Excel spreadsheet.

  

  kevin.w.wall

  committed
  32a597a

  Copy full SHA for 32a597a

• Minor cosmetic changes and some minor clarifications.

  

  kevin.w.wall

  committed
  ca1502a

  Copy full SHA for ca1502a

• Completed crypto design document.

  

  kevin.w.wall

  committed
  19640d0

  Copy full SHA for 19640d0

Commits on Nov 21, 2010

• Change javadoc to remove references to long defunct LegacyJavaEncryptor.

  

  kevin.w.wall

  committed
  3a41ff1

  Copy full SHA for 3a41ff1

Commits on Nov 17, 2010

• Made changes to authenticator verify password strength method to take a User object as an arg so we can validate the pw != username. method sig changed from

  Show description for e022dd2
  

  jtmelton

  committed
  e022dd2

  Copy full SHA for e022dd2

Commits on Nov 16, 2010

• - made ConfigurationException extend EnterpriseSecurityException and made the necessary upgrades throughout the config parsing code to support that

  Show description for 6a7f6ba
  

  arshan.dabirsiaghi

  committed
  6a7f6ba

  Copy full SHA for 6a7f6ba

Commits on Nov 10, 2010

• Modified HTTPQueryString validation rule so that unit tests would pass. Also made changes to comments (only) to reduce the number of differences between the live and test versions of ESAPI.properties

  Show description for d47648c
  

  augustd

  committed
  d47648c

  Copy full SHA for d47648c

Commits on Nov 9, 2010

• Minor update to getContextPath() so that the empty String "" will be returned instead of null if the context path is ROOT

  Show description for 77fb568
  

  augustd

  committed
  77fb568

  Copy full SHA for 77fb568

Commits on Nov 7, 2010

• In revision 1642 the Validator.Email regular expression in validation.properties was changed to add a single quote (aside: news to me that a single quote is a valid character in this context). Howe…

  Show description for 31adc92
  

  kevin.w.wall

  committed
  31adc92

  Copy full SHA for 31adc92

• Changed check that examines if password matches account name to use String.equalsIgnoresCase() rather than just String.equals().

  

  kevin.w.wall

  committed
  e6a07db

  Copy full SHA for e6a07db

Commits on Nov 6, 2010

• Fixed new input validation unit tests.

  

  manico.james

  committed
  9049eb2

  Copy full SHA for 9049eb2

• Resolves Issue #106

  Show description for ccf9875
  

  chrisisbeef

  committed
  ccf9875

  Copy full SHA for ccf9875

• Updating test to reflect new assumption that '*' is valid character in url parameters

  

  chrisisbeef

  committed
  708cb32

  Copy full SHA for 708cb32

• Changing validation regexs per google code issue #116

  

  chrisisbeef

  committed
  0635893

  Copy full SHA for 0635893

Commits on Nov 5, 2010

• fixed http://code.google.com/p/owasp-esapi-java/issues/detail?id=173 by moving 2 access control files from test to main

  

  manico.james

  committed
  f053ae1

  Copy full SHA for f053ae1

• Moved configuration for session ID name from being hardcoded as JSESSIONID to being a configurable property in ESAPI.properties.

  

  jtmelton

  committed
  9fc5704

  Copy full SHA for 9fc5704

Commits on Nov 4, 2010

• fixed the email list address for esapi-user

  

  manico.james

  committed
  becc7ad

  Copy full SHA for becc7ad

• Made update to fix bug http://code.google.com/p/owasp-esapi-java/issues/detail?id=108. This required denying a password that matches the account name. Also added a test to the AuthenticatorTest t…

  Show description for 1079948
  

  jtmelton

  committed
  1079948

  Copy full SHA for 1079948

• Made change to each file to allow Validator.Email support emails with apostrophes included.

  

  jtmelton

  committed
  d8a3c2e

  Copy full SHA for d8a3c2e

• Added a few tests to verify changes to HTTPParameterValue and to Email regexes, to ensure the changes function as intended.

  

  jtmelton

  committed
  4ab8006

  Copy full SHA for 4ab8006

• Fixed the javadoc to apply single quotes per oracle example.

  

  jtmelton

  committed
  536b173

  Copy full SHA for 536b173

• Added saveUsers to changePassword method to resolve http://code.google.com/p/owasp-esapi-java/issues/detail?id=13 bug

  

  jtmelton

  committed
  6c7eaf0

  Copy full SHA for 6c7eaf0

• Added @ character to default validation rule for HTTP Parameters (Validator.HTTPParameterValue)

  Show description for 2791592
  

  augustd

  committed
  2791592

  Copy full SHA for 2791592

Commits on Nov 3, 2010

• Updated TEST version of ESAPI.properties to include new properties from my past few checkins.

  

  augustd

  committed
  914cd66

  Copy full SHA for 914cd66

Commits on Nov 2, 2010

• Fix for SecurityWrapperRequest.getContextPath() throwing IntrusionException when application is deployed at the ROOT path

  Show description for 9e273d3
  

  augustd

  committed
  9e273d3

  Copy full SHA for 9e273d3

Commits on Nov 1, 2010

• Applying http://code.google.com/p/owasp-esapi-java/issues/detail?id=139 to stop race condition

  

  manico.james

  committed
  fd80a61

  Copy full SHA for fd80a61