Issues

SecurityConfiguration for IntrusionDetector.Disable not found in ESAPI.properties

esapi temp properties should use a instance specific temp dir

Esapi 2.2.4.15 canonicalize issue

ESAPI functions Canonicalize and DecodeFromURL report wrong bundle

intermittent class not found with esapi.extension 2.2.4.13 / 5.4.0.80

update guava in ESAPI extension to 32.01 due to CVE

OSGI error with ESAPI extension [org.lucee.esapi:2.2.3.10002L;findbugsAnnotations:3.0.1;]

installed extensions which have osgi errors can't be uninstalled

esapi extension is missing a bundle org.lucee.esapi;bundle-version=2.2.3.10001L

Upgrade ESAPI extension owasp-java-html-sanitizer 20220608.1

CFOutput and writeOutput()'s encodeFor attribute cannot be set to nothing

CFOutput encodeFor attribute can't be defaulted for application

ESAPI functions result in "CTOR threw exception" error with 2.2.4.5 extension

update ESAPI extension to 2.6.0.0

add function sanitizeHTML to esapi extension

recent ESAPI extensions missing from download page due to to type SNAPHOT (missing s)

bundle the esapi extension with lucee light as it's critical

PreserveEncoding() function to allow exceptions within ESAPI encoded output blocks

cfoutput encodefor attribute won't accept htmlattribute or xmlattribute

change HtmlEditFormat and HtmlCodeFormat to default to ESAPI encoders (Lucee 6)

add function EncodeForSQL

decodeFromURL does not work

scriptProtect doesn't filter out tag on* attributes

Upgrade OWASP ESAPI Extension to 2.2.2.0

java.lang.StackOverflowError - ESAPIEncode

Upgrade OWASP ESAPI Extension to 2.2.0

ESAPI functions break systemOutput under load

Canonicalize() does not support 4th parameter throwOnError added in CF11

Error with ESAPI functions - CTOR threw exception - ESAPI.properties could not be loaded by any means

Move ESAPI functions an extension

getSafeHTML() and isSafeHTML() functions missing

Add encodeFor attribute to CFOUTPUT