Questions tagged [esapi]

OWASP Enterprise Security API (ESAPI) is a family of open source web application security libraries for different languages.

Filter by
Sorted by
Tagged with
6
votes
2answers
7k views

Is OWASP ESAPI still the recommended way to secure JSP pages

I noticed OWASP ESAPI hasn't been updated in a while (minor update in 2016, and before 2013). Are there better alternatives to using it i.e. using a more maintained framework's utilities for say ...
1
vote
2answers
839 views

OWASP ESAPI PHP implementation for XSS attacks

I searched extensively for good materials for prevention of XSS attacks using OWASP ESAPI, but could not find any beginner material. Can some one please give me an example how this works?
1
vote
1answer
661 views

Is OWASP ESAPI .NET Edition really used? Is this project still alive?

I have just seen that the last release has been pushed out in 2009 and that raised my doubts.
5
votes
2answers
2k views

How does OWASP ESAPI protect against direct object reference vulnerabilities?

What other good solutions are there? From the Area51 proposal
14
votes
3answers
4k views

How do I get started using ESAPI WAF?

I've been to the OWASP Enterprise Security API (Java Edition) Google Groups page and found this information missing.