Commits

Breadcrumbs

History for

oncomponentize

User selector

All users

All time

Commit History

Commits on Sep 18, 2010

• Changed built-in signature algorithm from DSA to SHA1withDSA.

  

  kevin.w.wall

  committed
  0137ab9

  Copy full SHA for 0137ab9

Commits on May 16, 2010

• Fix SecurityWrapperRequest to handle null properly in getQueryString(). Fixes issue 121

  Show description for 0319ff5
  

  schallee@darkmist.net

  committed
  0319ff5

  Copy full SHA for 0319ff5

Commits on Mar 20, 2010

• 1) Change value of Encryptor.PreferredJCEProvider from 'SunJCE' to empty string; causes ESAPI to use the default JCE provider that the application is already using using rather than changing it to …

  Show description for 3e3bf9e
  

  kevin.w.wall

  committed
  3e3bf9e

  Copy full SHA for 3e3bf9e

Commits on Feb 24, 2010

• changing name, and minor cleanup

  

  manico.james

  committed
  a765f87

  Copy full SHA for a765f87

• working on latest logging modularization

  

  manico.james

  committed
  24c5ae7

  Copy full SHA for 24c5ae7

Commits on Feb 10, 2010

• Removed references to LegacyJavaEncryptor.

  

  kevin.w.wall

  committed
  e6b4dda

  Copy full SHA for e6b4dda

Commits on Feb 5, 2010

• Updated the 'Encryptor.cipher_modes.additional_allowed' property in ESAPI.properties (test version only) to add 'ECB' as a permitted cipher mode. Otherwise could not test encryption with ECB. NOTE:…

  Show description for 09c3174
  

  kevin.w.wall

  committed
  09c3174

  Copy full SHA for 09c3174

Commits on Feb 4, 2010

• New properties to support new crypto features w/ alternate JCE providers, serialized CipherText, disabling separate MAC, skipping MAC computation / validation if combined cipher mode is used, and c…

  Show description for b76bd31
  

  kevin.w.wall

  committed
  b76bd31

  Copy full SHA for b76bd31

Commits on Jan 23, 2010

• Default the upload temp directory to be the java.io.tmpdir system property

  Show description for 8b2e1cc
  

  schallee@darkmist.net

  committed
  8b2e1cc

  Copy full SHA for 8b2e1cc

Commits on Jan 18, 2010

• Allows for complete disabling of the ESAPI intrusion detector. Reference implementation ESAPI.properties defaults intrusion detection to ON.

  

  manico.james

  committed
  979b12d

  Copy full SHA for 979b12d

Commits on Jan 14, 2010

• documentation cleanup for validation

  

  manico.james

  committed
  058d84d

  Copy full SHA for 058d84d

• documentation cleanup

  

  manico.james

  committed
  15078e6

  Copy full SHA for 15078e6

Commits on Dec 17, 2009

• Fixes Issue 82

  Show description for fcb9463
  

  chrisisbeef

  committed
  fcb9463

  Copy full SHA for fcb9463

Commits on Nov 24, 2009

• Changed Encryptor.MasterKey to use only a 128-bit AES key (vs. the 256-bit AES key that previously was being used) so that those running the JUnit tests would not get test failures when they did no…

  Show description for 5657a64
  

  kevin.w.wall

  committed
  5657a64

  Copy full SHA for 5657a64

Commits on Nov 20, 2009

• - fixed bug that prevented the block status code from being set (ESAPIWAF.java and RedirectAction.java)

  Show description for 463dee2
  

  arshan.dabirsiaghi

  committed
  463dee2

  Copy full SHA for 463dee2

Commits on Nov 10, 2009

• - fixed test cases which were being screwed up by the slightly assuming getRealPath() implementation of the MockHttpServletContext. this ended up making more reliable test cases, but they will stil…

  Show description for ee02a6a
  

  arshan.dabirsiaghi

  committed
  ee02a6a

  Copy full SHA for ee02a6a

Commits on Nov 7, 2009

• - changed BeanShellRule to call .get() on the Action populated in BeanShell scripts, the assignment doesn't automatically happen

  Show description for 206e96c
  

  arshan.dabirsiaghi

  committed
  206e96c

  Copy full SHA for 206e96c

Commits on Nov 4, 2009

• Add '/' to valid characters in a directory path so unix paths work.

  Show description for 42923dc
  

  schallee@darkmist.net

  committed
  42923dc

  Copy full SHA for 42923dc

Commits on Oct 24, 2009

• merge quality into trunk, part 1

  

  manico.james

  committed
  8f8ca55

  Copy full SHA for 8f8ca55

Commits on Oct 15, 2009

• - beginning to finalize XSD for WAF policy file

  Show description for 0d77237
  

  arshan.dabirsiaghi

  committed
  0d77237

  Copy full SHA for 0d77237

Commits on Oct 1, 2009

• - uncommented outbound rules from base testing waf policy file (tests all pass)

  Show description for b13fd2a
  

  arshan.dabirsiaghi

  committed
  b13fd2a

  Copy full SHA for b13fd2a

Commits on Sep 18, 2009

• several additions:

  Show description for db3d40a
  

  arshan.dabirsiaghi

  committed
  db3d40a

  Copy full SHA for db3d40a

Commits on Sep 4, 2009

• - refactored WAFFilterTest.java into several individual test case classes in the same package, all improved and passing

  Show description for bcde355
  

  arshan.dabirsiaghi

  committed
  bcde355

  Copy full SHA for bcde355

Commits on Jul 10, 2009

• Move DefaultAccessController to main reference package to hide new design a bit until it's complete.

  

  planetlevel

  committed
  8a50069

  Copy full SHA for 8a50069

Commits on Jul 5, 2009

• Remove all uses of ESAPIRequest/ESAPIResponse (formerly SafeRequest/SafeResponse) from the reference implementation. Request/Response validation options are now either:

  Show description for 8c5ef5a
  

  planetlevel

  committed
  8c5ef5a

  Copy full SHA for 8c5ef5a

Commits on Jul 3, 2009

• Add configuration for file upload temp directory to ESAPI.properties.

  

  planetlevel

  committed
  030e869

  Copy full SHA for 030e869

Commits on Jul 2, 2009

• Logging format and consistency improvements (Java logging and Log4J Logging)

  

  planetlevel

  committed
  9031643

  Copy full SHA for 9031643

Commits on Jul 1, 2009

• Externalize validation rules into validation.properties

  

  planetlevel

  committed
  00dd151

  Copy full SHA for 00dd151

• Add configuration of canonicalization codecs to ESAPI.properties

  

  planetlevel

  committed
  601b551

  Copy full SHA for 601b551

Commits on Jun 6, 2009

• Get test coverage to 82%

  Show description for 2b76579
  

  planetlevel

  committed
  2b76579

  Copy full SHA for 2b76579

Commits on May 28, 2009

• remove unused keystore files

  

  planetlevel

  committed
  c6f9384

  Copy full SHA for c6f9384

• Change to use AES 256 as the default encryption algorithm

  

  planetlevel

  committed
  9dabe73

  Copy full SHA for 9dabe73

• Major SecurityConfiguration/ESAPI.properties cleanup

  Show description for 0af29da
  

  planetlevel

  committed
  0af29da

  Copy full SHA for 0af29da

• wrong directory location

  

  planetlevel

  committed
  aaed937

  Copy full SHA for aaed937

Commits on May 21, 2009

• Update Encrytor to use strong crypto policy files from Sun.

  

  planetlevel

  committed
  1f676f6

  Copy full SHA for 1f676f6

Pagination

Previous

Next