[Esapi-user] ESAPI .NET Version

Alex Smolen me at alexsmolen.com
Thu May 27 14:10:16 EDT 2010


Hi Paul,

I'm in the process of getting Visual Studio up and running, I'll look  
into fixing this in the repository as soon as I can. In the meantime I  
would suggest you remove the dependency in the ESAPI project for the  
AntiXSS 3.0 DLL and add the dependency for the AntiXSS 3.1 DLL.

Thanks,
Alex


On May 27, 2010, at 12:41 AM, Paul Rib wrote:

> Hello all,
>
> I've been trying to look at the .NET version of ESAPI and I'm  
> struggling to actually make it work. Maybe one of help could help me  
> out.
> I've installed the latest version of the ESAPI version for .NET as  
> well as the AntiXSS 3.1 library from Microsoft in VS2010 Web  
> developer Express.
>
> I've build a short POC web app that doesn't fail to get build but  
> when it executes I get a message saying the following message...
>
> System.IO.FileLoadException: Could not load file or assembly  
> 'AntiXSSLibrary, Version=3.0.3264.23865, Culture=neutral,  
> PublicKeyToken=d127efab8a9c114f' or one of its dependencies. The  
> located assembly's manifest definition does not match the assembly  
> reference. (Exception from HRESULT: 0x80131040) File name:  
> 'AntiXSSLibrary, Version=3.0.3264.23865, Culture=neutral,  
> PublicKeyToken=d127efab8a9c114f' at  
> Owasp.Esapi.Codecs.HtmlCodec.Encode(String input) at  
> Owasp.Esapi.Encoder.Encode(String codecName, String input) at  
> _Default.Login1_Authenticate(Object sender, AuthenticateEventArgs e)  
> in c:\Documents and Settings\ribeiro\My Documents\Visual Studio  
> 2010\WebSites\WebSite1\Default.aspx.cs:line 27 === Pre-bind state  
> information === LOG: User = DARTALIS\ribeiro LOG: DisplayName =  
> AntiXSSLibrary, Version=3.0.3264.23865, Culture=neutral,  
> PublicKeyToken=d127efab8a9c114f (Fully-specified) LOG: Appbase = file:///C:/Documents 
>  and Settings/ribeiro/My Documents/Visual Studio 2010/WebSites/ 
> WebSite1/ LOG: Initial PrivatePath = C:\Documents and Settings 
> \ribeiro\My Documents\Visual Studio 2010\WebSites\WebSite1\bin  
> Calling assembly : Owasp.Esapi, Version=1.0.0.0, Culture=neutral,  
> PublicKeyToken=null. === LOG: This bind starts in default load  
> context. LOG: Using application configuration file: C:\Documents and  
> Settings\ribeiro\My Documents\Visual Studio 2010\WebSites 
> \WebSite1\web.config LOG: Using host configuration file: LOG: Using  
> machine configuration file from C:\WINDOWS\Microsoft.NET\Framework 
> \v4.0.30319\config\machine.config. LOG: Post-policy reference:  
> AntiXSSLibrary, Version=3.0.3264.23865, Culture=neutral,  
> PublicKeyToken=d127efab8a9c114f LOG: Attempting download of new URL file:///C:/WINDOWS/Microsoft.NET/Framework/v4.0.30319/Temporary 
>  ASP.NET Files/website1/1f9729f0/a6a3fbb0/AntiXSSLibrary.DLL. LOG:  
> Attempting download of new URL file:///C:/WINDOWS/Microsoft.NET/Framework/v4.0.30319/Temporary 
>  ASP.NET Files/website1/1f9729f0/a6a3fbb0/AntiXSSLibrary/ 
> AntiXSSLibrary.DLL. LOG: Attempting download of new URL file:///C:/Documents 
>  and Settings/ribeiro/My Documents/Visual Studio 2010/WebSites/ 
> WebSite1/bin/AntiXSSLibrary.DLL. WRN: Comparing the assembly name  
> resulted in the mismatch: Minor Version ERR: Failed to complete  
> setup of assembly (hr = 0x80131040). Probing terminated.
>
>
>
>
>
> Indeed the latest assembly version on my system seems to be  
> 3.1.3524.16873...
>
> Does anybody know how to fix this? Either change the required  
> assembly number, or does somebody have the right antixss installer  
> package since I cannot find it anymore on the Internet (only 1.5 or  
> 3.1)..
>
> Cheers,
> Paul
> _______________________________________________
> Esapi-user mailing list
> Esapi-user at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/esapi-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/esapi-user/attachments/20100527/1650bb8c/attachment.html 


More information about the Esapi-user mailing list