Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

decodeFromURL does not work

Description

encodeForURL(str) - decodeFromURL(str) throws an error.
SecurityConfiguration for IntrusionDetector.Disable not found in ESAPI.properties

Environment

Lucee 5.3.7.47 (Was not available in drop down)
Apache Tomcat/8.5.33
Linux (3.10.0-1160.6.1.el7.x86_64) 64bit

Attachments

1
  • 11 Dec 2020, 09:14 am

Activity

Show:

Pothys - MitrahSoft 18 December 2020 at 09:37

Okay, ,
As per the reporter said I close this ticket. In the future, If this issue reproduced by anyone means I will reopen this ticket.

Anders Thulin 17 December 2020 at 15:26

Thank you for looking into this.
Strange enough I have not been able to reproduce the error today but the server was rebooted since the report.
I suspect that it might have to do with the string encoded contained French characters in double byte format. (e.g. Ú and É) but you may close this issue until I can find a way to reproduce it.

Pothys - MitrahSoft 17 December 2020 at 11:30

I've checked this ticket with affected version 5.3.7.47 and latest version 5.3.8.119-SNAPSHOT. I didn't get an issue what you said above.
For me, encodeForUrl and decodeFromURL are working fine as same as ACF. Could you share your exact scenario of an issue?

I got only one error as like java.lang.reflect.InvocationTargetException Encoder class (org.owasp.esapi.reference.DefaultEncoder) CTOR threw exception when changes the ESAPI extension from or to latest version 2.2.0.0. After lucee restart, the issue was gone.

Closed

Details

Assignee

Reporter

Priority

Labels

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Affects versions

Created 11 December 2020 at 09:15
Updated 19 December 2024 at 20:45
Resolved 18 December 2020 at 09:38

Flag notifications