[Esapi-dev] Supporting Large Environments

Jim Manico jim.manico at owasp.org
Sun Jan 10 23:06:23 EST 2010


David,

I'll be glad to add this to Google code - only developers of ESAPI can
add issues to Google code for now. (I believe).

This feedback is awesome - keep it coming please!

More soon,
Jim

> David - 
>
> Can you please open up issues in the google issue tracker -
>
> http://code.google.com/p/owasp-esapi-java/issues/list
>
> Thanks,
> Chris
>
> On Sun, Jan 10, 2010 at 8:54 PM, David Sklarew
> <david.sklarew at gmail.com <mailto:david.sklarew at gmail.com>> wrote:
>
>     Hi,
>
>        I have a very large JSR portal with 50+ wars and growing….
>
>      
>
>     I have noticed a few challenges.  They include:
>
>      
>
>     1) Lack of support for multiple validator configuration files…
>
>     In my organization, we desire standard validation patterns to be
>     stored in a single location and used by all apps.  Apps also need
>     their own validation config file.
>
>     --> Proposal: modify property "Validator.ConfigurationFile" to
>     support a list of files to load.
>
>     Minor code modification
>
>      
>
>      
>
>     2) Storing esapi.properties in the filesystem is preferred (
>     simple maintainence).  However, it contains app specific
>     properties (ie. appname).
>
>     --> Proposal: allow wars to override these properties through use
>     of thread local variables.
>
>      
>
>      
>
>     David
>
>      
>
>
>     _______________________________________________
>     Esapi-dev mailing list
>     Esapi-dev at lists.owasp.org <mailto:Esapi-dev at lists.owasp.org>
>     https://lists.owasp.org/mailman/listinfo/esapi-dev
>
>
>
>
> -- 
> -- Chris
>
> OWASP ESAPI Developer
> http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API
>
> Check out OWASP ESAPI for Java
> http://code.google.com/p/owasp-esapi-java/
>
> Coming soon OWASP ESAPI for JavaScript
> http://code.google.com/p/owasp-esapi-js/
>
>
> _______________________________________________
> Esapi-dev mailing list
> Esapi-dev at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/esapi-dev
>   


-- 
Jim Manico
OWASP Podcast Host/Producer
http://www.manico.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/esapi-dev/attachments/20100110/e24c3c8e/attachment-0001.html 


More information about the Esapi-dev mailing list