Code

Initial 2.5.2.0 release preparation#784

Code

Merged

kwwall merged 25 commits intoESAPI:developESAPI/esapi-java-legacy:developfrom kwwall:2.5.2.0-releasekwwall/esapi-java-legacy:2.5.2.0-releaseCopy head branch name to clipboardApr 12, 2023

+755-82

Commits

Commits on Mar 26, 2023

• Minor Javadoc fixes.

  kwwall

  committed
  9d44f01

  Copy full SHA for 9d44f01

• Update example scripts so they work for recent ESAPI releases.

  kwwall

  committed
  b9741b1

  Copy full SHA for b9741b1

• Mention signed commits now required.

  kwwall

  committed
  2a81f20

  Copy full SHA for 2a81f20

Commits on Mar 28, 2023

• Updated plugins and dependencies to latest version.

  Show description for f00af08
  kwwall

  committed
  f00af08

  Copy full SHA for f00af08

• Roll back maven-site-plugin to previous 4.0.0-M5 release as new one causes failure in running 'mvn site'.

  kwwall

  committed
  2787d0b

  Copy full SHA for 2787d0b

• Update template for newer release notes boilerplate.

  kwwall

  committed
  d127c31

  Copy full SHA for d127c31

Commits on Mar 30, 2023

• Used to generate 2.5.2.0 release notes

  kwwall

  committed
  6a3233d

  Copy full SHA for 6a3233d

• Fix release date for 2.5.2.0 release.

  kwwall

  committed
  9956c6c

  Copy full SHA for 9956c6c

Commits on Apr 7, 2023

• Add missing class level Javadoc.

  kwwall

  committed
  b5071d7

  Copy full SHA for b5071d7

Commits on Apr 10, 2023

• New 2.5.2.0 release notes (unfinished, see TBD comments.)

  kwwall

  committed
  7dbcb59

  Copy full SHA for 7dbcb59

• Change reference of latest release from 2.5.1.0 to 2.5.2.0.

  kwwall

  committed
  c3357de

  Copy full SHA for c3357de

• Make ANONYMOUS user 'final'.

  kwwall

  committed
  194927e

  Copy full SHA for 194927e

• Added 2 new properties (HttpUtilities.MaxUploadFileCount & HttpUtilities.FileUploadAllowAnonymousUser) to address CVE-2023-24998.

  kwwall

  committed
  e12fa7f

  Copy full SHA for e12fa7f

• Update more plugins, excluding maven-site-plugin & the fluido skin which cause problems with 'mvn site'.

  kwwall

  committed
  6c6f15f

  Copy full SHA for 6c6f15f

• Add 2 new properties to address CVE-2023-24998: HttpUtilities.MaxUploadFileCount and HttpUtilities.FileUploadAllowAnonymousUser.

  kwwall

  committed
  de973ea

  Copy full SHA for de973ea

• Changed log message to specific the _ESAPI_ WAF.

  kwwall

  committed
  91aea88

  Copy full SHA for 91aea88

• Extensive updates to Javadoc, especially to getFileUploads methods.

  kwwall

  committed
  eb73360

  Copy full SHA for eb73360

• Changes to address CVE-2023-24998.

  kwwall

  committed
  39e313b

  Copy full SHA for 39e313b

• Add new tests for getFileUploads method to test CVE-2023-24998 remediation (as much as possible).

  kwwall

  committed
  38e2248

  Copy full SHA for 38e2248

• Removed '<includeDependencySources>true</includeDependencySources>'.

  kwwall

  committed
  14fb179

  Copy full SHA for 14fb179

Commits on Apr 12, 2023

• Commented out testGetFileUploadsUnauthenticatedUser for reasons noted in code.

  kwwall

  committed
  e9a907d

  Copy full SHA for e9a907d

• Changed logger.info() back to logger.debug() & added comment.

  kwwall

  committed
  519fe0c

  Copy full SHA for 519fe0c

• Updates to release notes.

  kwwall

  committed
  3c361b8

  Copy full SHA for 3c361b8

• Update to AntiSamy 1.7.3 to address CVE-2023-26119.

  kwwall

  committed
  e69430e

  Copy full SHA for e69430e

• Update release notes to mention CVE-2023-26119.

  kwwall

  committed
  9477fca

  Copy full SHA for 9477fca