[Esapi-user] Need help in using esapi.js in a JSP file

Mon May 9 05:56:33 EDT 2011

Hi,

I am trying to test encodeForURL facility of esapi.js file in following way à

1.    Downloaded 'esapi4js-0.1.3.zip'

2.    Extracted it inside "C:\AMEY\Nessie\Tickets\JUL 2011\UKC4032285-Portculliss security\MyTESTs\esapi\esapi4js-0.1.3"

3.    Created a new 'MyESAPITest.htm' file inside same folder in step-2 (attached file)

4.    But when I run this htm file, it gives following error à

Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET CLR 2.0.50727; MS-RTC LM 8; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)

Timestamp: Mon, 9 May 2011 09:52:39 UTC

Message: Object expected

Line: 14

Char: 1

Code: 0

URI: file:///C:/AMEY/Nessie/Tickets/JUL%202011/UKC4032285-Portculliss%20security/MyTESTs/esapi/esapi4js-0.1.3/resources/Base.esapi.properties.js <file:///C:\AMEY\Nessie\Tickets\JUL%202011\UKC4032285-Portculliss%20security\MyTESTs\esapi\esapi4js-0.1.3\resources\Base.esapi.properties.js> 

Can you please tell me what is going wrong here?

I want to use this esapi.js library inside a jsp to validate user input to avoid XSS attacks. 

Please help.

Thank you.

With warm regards,

Amey Mogare

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/esapi-user/attachments/20110509/6b7492ee/attachment.html 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/esapi-user/attachments/20110509/6b7492ee/attachment.htm 