javaesapi

Minimum required properties in ESAPI.properties


My web application uses only the following ESAPI encode methods:

In this case, what is the minimum required properties in ESAPI.properties?

Now I'm using ESAPI 2.1.0.1 and this properties.


Solution

  • If you are just using the encoder() function, the 3 lines in the encoder section is all you need. Lines 99-119 (between all the comments).

    Edit Plus you must specify a default encoder. Example:

    ESAPI.Encoder=org.owasp.esapi.reference.DefaultEncoder
    
    Encoder.AllowMultipleEncoding=false
    
    Encoder.AllowMixedEncoding=false
    
    Encoder.DefaultCodecList=HTMLEntityCodec,PercentCodec,JavaScriptCodec