[SHIRO-731] Use OWasp Java Encoder to escape user supplied content to the logs - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Resolved
Affects Version/s: None
Fix Version/s: 1.5.0
Component/s: None
Labels:
None

Description

We should use the Owasp java encoder to escape user supplied content to the logs, to avoid CRLF type attacks.

Attachments

Issue Links

links to

GitHub Pull Request #182

Activity

People

Assignee:: Unassigned

Reporter:: Colm O hEigeartaigh

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 19/Nov/19 16:52

Updated:: 19/Nov/19 19:32

Resolved:: 19/Nov/19 19:32

Time Tracking

Estimated:

Not Specified

Remaining:

0h

Logged:

40m