[Esapi-user] ESAPI 1.4.2

Jim Manico jim.manico at owasp.org
Thu Jan 14 19:23:21 EST 2010

I'm getting ready to do a "ESAPI 1.4.x" sprint over the weekend in order
to increase the quality of this branch.

I've heard a mix of great success stories with 1.4, as well as some very
frustrating challenges that are not easy to overcome.

My tactical goals are:

1) Allow for programmatic disabling of the intrusion detector
2) Do another pass at the log4j logger and back-port some of the 2.0
logging code to this branch. It needs it badly.
3) Stop releasing 1.4.x as a jar! argh! The 1.4.2 release needs to be a
zip like the 2.0 branch where the property files are separated from the jar.
4) Double-check on
http://code.google.com/p/owasp-esapi-java/issues/detail?id=21 and close
it out.

I start this sprint in less than 24 hours and will have it deployed for
the community before Monday.

Any other thoughts?

- Jim

Jim Manico
OWASP Podcast Host/Producer
OWASP ESAPI Project Manager

More information about the Esapi-user mailing list