[Esapi-user] ESAPI.validator().getValidInput() crashes app on startup

Wed Aug 10 21:14:21 EDT 2011

Please disregard.

I added dependency to my pom.xml

<dependency>
   <groupId>commons-fileupload</groupId>
   <artifactId>commons-fileupload</artifactId>
   <version>1.2</version>
</dependency>

-----Original Message-----
From: Normando Macaraeg [mailto:nmacaraeg at jaspersoft.com] 
Sent: Wednesday, August 10, 2011 5:33 PM
To: 'esapi-user at lists.owasp.org'
Subject: ESAPI.validator().getValidInput() crashes app on startup

javax.servlet.ServletException: Filter execution threw an exception

com.jaspersoft.jasperserver.war.util.CharacterEncodingFilter.doFilter(Char
acterEncodingFilter.java:67)

org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(Delega
tingFilterProxy.java:236)

org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFi
lterProxy.java:167)

root cause

java.lang.NoClassDefFoundError:
org/apache/commons/fileupload/ProgressListener
	java.lang.Class.forName0(Native Method)
	java.lang.Class.forName(Class.java:169)
	org.owasp.esapi.util.ObjFactory.make(ObjFactory.java:74)
	org.owasp.esapi.ESAPI.httpUtilities(ESAPI.java:121)
	org.owasp.esapi.ESAPI.currentRequest(ESAPI.java:70)
	org.owasp.esapi.reference.Log4JLogger.log(Log4JLogger.java:434)

org.owasp.esapi.reference.Log4JLogger.warning(Log4JLogger.java:205)

org.owasp.esapi.reference.DefaultIntrusionDetector.addException(DefaultInt
rusionDetector.java:65)

But when I change ESAPI.properties like so I get a similar error.

ESAPI.Logger==org.apache.log4j.Logger

I'm sure I missed a configuration setting somewhere. Any ideas?

-Norm