Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-5343

Update owasp-esapi-java

    XMLWordPrintableJSON

Details

    • Task
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • Trunk
    • 14.12.01
    • framework

    Description

      As reported by Christoph Neuroth at OFBIZ-5254, we still use a patched version from OFBIZ-3135 and it's time to update to last version

      Attachments

        1. commons-configuration-1.9.jar
          350 kB
          Jacques Le Roux
        2. esapi-2.1.0.jar
          358 kB
          Jacques Le Roux
        3. logkit-1.0.1.jar
          70 kB
          Jacques Le Roux
        4. OFBIZ-5343-Update owasp-esapi-java.patch
          5 kB
          Jacques Le Roux

        Issue Links

          is duplicated by

          Task - A task that needs to be done. OFBIZ-5795 Update esapi to 2.1.0

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is part of

          Improvement - An improvement or enhancement to an existing feature or task. OFBIZ-1525 Issue to group security concerns

          • Critical - Crashes, loss of data, severe memory leak.
          • Open
          is related to

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-5254 Services allow arbitrary HTML for parameters with allow-html set to "safe"

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-3135 In owasp-esapi-java, htmlCodec.decode is broken for all entities where entity.substr(0, x) exists

          • Major - Major loss of function.
          • Closed

          Activity

            People

              jacopoc Jacopo Cappellato
              jleroux Jacques Le Roux
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: