Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Housekeeping, OSGI start/stop, Parameterized some hardcoded values. #663

Merged
merged 17 commits into from
Feb 26, 2022
Merged

Housekeeping, OSGI start/stop, Parameterized some hardcoded values. #663

merged 17 commits into from
Feb 26, 2022

Conversation

xeno6696
Copy link
Collaborator

Also, this updates AntiSamy to 1.6.5. This also records the changes for #661 and the revert commit. (If we ever want to return to OSGI manifests it's at least in the revision history.)

@xeno6696 xeno6696 changed the title Housekeeping PR to ensure that I'm in sync with the REPO and that my key changes are recorded. Housekeeping, OSGI start/stop, Parameterized some hardcoded values. Feb 25, 2022
configuration/esapi/ESAPI.properties Outdated Show resolved Hide resolved
src/test/resources/esapi/ESAPI.properties Outdated Show resolved Hide resolved
Copy link
Collaborator Author

@xeno6696 xeno6696 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@kwwall the change to zero is in this commit here.

@xeno6696 xeno6696 requested a review from kwwall February 26, 2022 03:43
@kwwall kwwall merged commit 0f9ab8a into ESAPI:develop Feb 26, 2022
kwwall added a commit that referenced this pull request Apr 8, 2022
* Signed key history for MATT SEIL begins here.

* Signed key history for MATT SEIL begins here.  Fixed email typo.

* Revert "Signed key history for MATT SEIL begins here.  Fixed email typo."

This reverts commit 87c4c4e.

* created file on main.

* Deleted foo.txt

* Bump release to new patch version #.

* #661 Added ability to generate OSGi metadata with the command 'mvn org.apache.felix:maven-bundle-plugin:manifest'.

* Updated to AntiSamy 1.6.5.

* Revert "#661 Added ability to generate OSGi metadata with the command 'mvn org.apache.felix:maven-bundle-plugin:manifest'."

This reverts commit 9fa2a53.

* #656 -->  Parameterized cookie name length and value to correspond with the HTTP maxes defined in esapi.properties.

* Adjusted regex to allow for zero-length matches.

* Added per review comments for PR #663

* #656 Finished sweep looking for headername, headervalue, and header value sizes as well as the 'Cookie' versions of those statements.  Added unit tests.

* #663 Fixed a missed unit test.

* Antisamy 1.6.6, Antisamy regression test for analysis 1.  A handful of new regression tests for other purposes in validation and encoder tests.

* Attempting to fix classfile differences with antisamy dependencies.

* Fixed typo on exclusion.

* Added xerces exclusion to antisamy in the pom.xml

* Added test cases 2 & 3.

* Added test cases 2 & 3.  @ignore on test case 3 from AntiSamy as the DOS is still present.

* Forced my version to match Wichers.

* Added a pair of unit tests for canoncialization to prove out an issue opened up on github.  One of which however reminded me that we need a codec to account for UTF-8 encoding/decoding.

Co-authored-by: Matt Seil <xeno6696[at]gmail.com>
Co-authored-by: kwwall <kevin.w.wall@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants