[Esapi-user] Regarding ESAPI WAF
jim.manico at owasp.org
Tue Nov 16 06:20:00 EST 2010
On Nov 15, 2010, at 6:50 PM, "Kevin W. Wall" <kevin.w.wall at gmail.com> wrote:
> On 11/15/2010 11:34 PM, Chris Schmidt wrote:
>> I am forwarding this message along for Arshan
>> Devs and users,
>> For the final 2.0 release we wanted to more tightly integrate the WAF into
>> the rest of ESAPI. This means that the WAF will use the ESAPI logger instead
>> of log4j, its exceptions will extend ESAPI exceptions, etc. Does anyone
>> object to these old API being removed instead of deprecated? The reason we'd
>> like to remove entirely as opposed to deprecate is to remove dependencies on
>> things like log4j which would otherwise hang around only to satisfy the
>> deprecated methods.
>> Looking for your vote on this - remove or deprecate?
> +1 for burning it to the ground (i.e., removal)
> Kevin W. Wall
> "The most likely way for the world to be destroyed, most experts agree,
> is by accident. That's where we come in; we're computer professionals.
> We cause accidents." -- Nathaniel Borenstein, co-creator of MIME
> Esapi-user mailing list
> Esapi-user at lists.owasp.org
More information about the Esapi-user