[Esapi-user] ESAPI .NET Version

Paul Rib rib.paul at gmail.com
Thu May 27 03:41:36 EDT 2010


Hello all,

I've been trying to look at the .NET version of ESAPI and I'm struggling to
actually make it work. Maybe one of help could help me out.
I've installed the latest version of the ESAPI version for .NET as well as
the AntiXSS 3.1 library from Microsoft in VS2010 Web developer Express.

I've build a short POC web app that doesn't fail to get build but when it
executes I get a message saying the following message...

System.IO.FileLoadException: Could not load file or assembly
'AntiXSSLibrary, Version=3.0.3264.23865, Culture=neutral,
PublicKeyToken=d127efab8a9c114f' or one of its dependencies. The located
assembly's manifest definition does not match the assembly reference.
(Exception from HRESULT: 0x80131040) File name: 'AntiXSSLibrary,
Version=3.0.3264.23865, Culture=neutral, PublicKeyToken=d127efab8a9c114f' at
Owasp.Esapi.Codecs.HtmlCodec.Encode(String input) at
Owasp.Esapi.Encoder.Encode(String codecName, String input) at
_Default.Login1_Authenticate(Object sender, AuthenticateEventArgs e) in
c:\Documents and Settings\ribeiro\My Documents\Visual Studio
2010\WebSites\WebSite1\Default.aspx.cs:line 27 === Pre-bind state
information === LOG: User = DARTALIS\ribeiro LOG: DisplayName =
AntiXSSLibrary, Version=3.0.3264.23865, Culture=neutral,
PublicKeyToken=d127efab8a9c114f (Fully-specified) LOG: Appbase =
file:///C:/Documents and Settings/ribeiro/My Documents/Visual Studio
2010/WebSites/WebSite1/ LOG: Initial PrivatePath = C:\Documents and
Settings\ribeiro\My Documents\Visual Studio 2010\WebSites\WebSite1\bin
Calling assembly : Owasp.Esapi, Version=1.0.0.0, Culture=neutral,
PublicKeyToken=null. === LOG: This bind starts in default load context. LOG:
Using application configuration file: C:\Documents and Settings\ribeiro\My
Documents\Visual Studio 2010\WebSites\WebSite1\web.config LOG: Using host
configuration file: LOG: Using machine configuration file from
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\config\machine.config. LOG:
Post-policy reference: AntiXSSLibrary, Version=3.0.3264.23865,
Culture=neutral, PublicKeyToken=d127efab8a9c114f LOG: Attempting download of
new URL file:///C:/WINDOWS/Microsoft.NET/Framework/v4.0.30319/Temporary
ASP.NET <http://asp.net/>Files/website1/1f9729f0/a6a3fbb0/AntiXSSLibrary.DLL.
LOG: Attempting
download of new URL
file:///C:/WINDOWS/Microsoft.NET/Framework/v4.0.30319/Temporary
ASP.NET<http://asp.net/>Files/website1/1f9729f0/a6a3fbb0/AntiXSSLibrary/AntiXSSLibrary.DLL.
LOG:
Attempting download of new URL file:///C:/Documents and Settings/ribeiro/My
Documents/Visual Studio 2010/WebSites/WebSite1/bin/AntiXSSLibrary.DLL. WRN:
Comparing the assembly name resulted in the mismatch: Minor Version ERR:
Failed to complete setup of assembly (hr = 0x80131040). Probing terminated.





Indeed the latest assembly version on my system seems to be
3.1.3524.16873...

Does anybody know how to fix this? Either change the required assembly
number, or does somebody have the right antixss installer package since I
cannot find it anymore on the Internet (only 1.5 or 3.1)..

Cheers,
Paul
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/esapi-user/attachments/20100527/a8f4a84c/attachment.html 


More information about the Esapi-user mailing list