[Esapi-user] [OWASP-ESAPI] How do we customize the error messages with OWASP

Jim Manico jim.manico at owasp.org
Mon Jul 26 20:43:08 EDT 2010


  My mistake, I feel the custom validation mechanism should be in ESAPI 
3.0. Thanks to Dave, Kevin (and several others) who pointed this out to 
me. ;)

- Jim

> Jim Manico wrote:
>> There is no way to customize these validation error messages yet, its
>> planned for ESAPI 4.0.
> 4.0 ?? Not even 3.0 ?? That must be at least a half a decade off, don't you
> think?
>
> If nothing else, we should provide a simple message catalog that developers
> can tweak to insert their own error messages. That would also help with the
> I18N efforts as well.
>
> -kevin



More information about the Esapi-user mailing list