Issues

• OWASP Java Encoder

  ESAPI/esapi-java-legacy#921 · opened on Sep 27, 2026

• CSSCodec / EncodingPatternPreservation: predictable placeholder marker can desync restoreOriginalContent()

  ESAPI/esapi-java-legacy#915 · opened on Jul 14, 2026

• Incomplete documentation in validation.properties

  ESAPI/esapi-java-legacy#913 · opened on Jul 1, 2026

• Update documentation for the 'ESAPI 2.x Symmetric Encryption User Guide'

  ESAPI/esapi-java-legacy#908 · opened on Feb 21, 2026

• SecurityWrapperResponse.setHeader does not handle nulls

  ESAPI/esapi-java-legacy#906 · opened on Feb 5, 2026

• Upgrade Apache Commons BeanUtils to get rid of commons-collections 3.x

  ESAPI/esapi-java-legacy#899 · opened on Oct 15, 2025

• Four tests failing with "UnsupportedOperation This method has been removed for security."

  ESAPI/esapi-java-legacy#893 · opened on Jul 9, 2025
  2

• Upgrade the version of commons-configuration

  ESAPI/esapi-java-legacy#872 · opened on Feb 19, 2025
  8

• Invalid version attribute in esapi.tld within esapi-2.6.0.0.jar causes deployment failure.

  ESAPI/esapi-java-legacy#866 · opened on Jan 8, 2025
  9

• Http -Parameter Value Length / Validation issue

  ESAPI/esapi-java-legacy#865 · opened on Dec 18, 2024
  5

• Revert Dependency Check goal from 'purge' to 'check' once NVD API stops returning 503 'Service Unavailable' errors

  ESAPI/esapi-java-legacy#815 · opened on Nov 24, 2023
  1

• decode method doesn't work proper for some strings

  ESAPI/esapi-java-legacy#814 · opened on Nov 24, 2023
  3

• Option to omit event type prefix in logs

  ESAPI/esapi-java-legacy#811 · opened on Nov 20, 2023
  1

• Change AntiSamy to eventually use SAX parser by default, but allow DOM parser to be used for backward compatibility

  ESAPI/esapi-java-legacy#800 · opened on Sep 30, 2023

• ESAPI excludes transitive dependency xalan from xom, but does not include it itself

  ESAPI/esapi-java-legacy#795 · opened on Aug 14, 2023
  2

• Context should also be logged in HTMLValidationRule

  ESAPI/esapi-java-legacy#793 · opened on Jul 28, 2023

• Fix Javadoc code example in ValidationErrorList

  ESAPI/esapi-java-legacy#788 · opened on Jun 17, 2023
  1

• HTTPUtilities needs its Javadoc seriously reworked

  ESAPI/esapi-java-legacy#783 · opened on Apr 7, 2023

• Javadoc needs updated to correct links to OWASP ESAPI wiki page

  ESAPI/esapi-java-legacy#781 · opened on Apr 1, 2023
  1

• ESAPI is not returning right logger level

  ESAPI/esapi-java-legacy#780 · opened on Mar 22, 2023
  6

• Perform Release

  ESAPI/esapi-java-legacy#752 · opened on Oct 22, 2022

• ESAPI.securityConfiguration().setResourceDirectory(...) not considered anymore in loading of configuration via classloader

  ESAPI/esapi-java-legacy#746 · opened on Oct 10, 2022

• Properties and properties files that are required, even if esapi logging is not used

  ESAPI/esapi-java-legacy#742 · opened on Sep 11, 2022
  3

• Random GUIDs and UUID, and Randomizer.java

  ESAPI/esapi-java-legacy#737 · opened on Aug 22, 2022
  3

• EncryptedPropertiesUtilsTest.testCreateNew:93 » UnsupportedOperation This method has been removed for security.

  ESAPI/esapi-java-legacy#721 · opened on Jul 17, 2022
  17