[Esapi-dev] servlet 2.3 support?

[Ed Schaller]

K. I've committed changes that should allow 1.4 to compile and run with
the servlet 2.3 spec. If folks with easy access to a 2.3 container could
try it I would appreciate it.

The one complication was SafeRequest#setCharacterEncoding(String). I had
originally wanted to emulate this method for 2.3 but that requires hooking
setContentType(String) and writing a parser for the Content-Type header
so that modifying the charset parameter could be done properly. The
work to do this and my general feeling that what SafeRequest's
setCharacterEncoding(String) isn't a good idea made me not worry about
it. The 2.3 version just throws a UnsupportedOperationException.

The 2.4 versions calls the wrapped method via reflection. I'm caching
the method looked up and not invoking it unless needed which should
cut some of the reflection performance issues. If performance becomes
a issue for anyone we can reassess how this is done.

I still need to add the JSP 1.2 tld but I'm leaving that for another day.

>>>------>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
Url : https://lists.owasp.org/pipermail/esapi-dev/attachments/20100207/7300f557/attachment.bin