[Esapi-user] Esapi-user Digest, Vol 20, Issue 12
dan at denimgroup.com
Thu Jul 28 11:08:17 EDT 2011
I'll do you one better and send you a patch. Bigger question is where else does this guidance need to go?
Sent from my iPhone
On Jul 28, 2011, at 9:52 AM, "Jim Manico" <jim.manico at owasp.org<mailto:jim.manico at owasp.org>> wrote:
I agree Dan, we really need stronger javadoc language here. Can you please register a bug on google code for this and assign to me? I'll handle it as soon as I can.
- Jim Manico
On Jul 28, 2011, at 8:33 AM, Dan Cornell <<mailto:dan at denimgroup.com>dan at denimgroup.com<mailto:dan at denimgroup.com>> wrote:
I agree 100%, Jeff. All encoders are important for intrusion detection and canonicalization. I was •only• commenting on my desire to see dev's use query parameterization over manual encoding.
Sorry for the mix up.
What is the best way to communicate that to developers so that the Codecs aren’t misused? The Javadocs for the database codecs could be updated and that might help. Any other ideas?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Esapi-user