Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: ESAPI/esapi-java-legacy
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: esapi-2.7.0.0
Choose a base ref
...
head repository: ESAPI/esapi-java-legacy
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: develop
Choose a head ref
  • 9 commits
  • 10 files changed
  • 1 contributor

Commits on Jun 28, 2025

  1. Change to reference 2.7.0.0 as the latest ESAPI release.

    @kwwall
    kwwall committed Jun 28, 2025
    Configuration menu
    Copy the full SHA
    bf9804a View commit details
    Browse the repository at this point in the history

  2. Update Description in Summary with CNA's CVE description.

    @kwwall
    kwwall committed Jun 28, 2025
    Configuration menu
    Copy the full SHA
    0cd00c0 View commit details
    Browse the repository at this point in the history

  3. Update pom.xmlfor next planned (SNAPSHOT) release.

    @kwwall
    kwwall committed Jun 28, 2025
    Configuration menu
    Copy the full SHA
    126e0b7 View commit details
    Browse the repository at this point in the history

  4. Correct name and URL for item on ESAPI's GitHub Discussion list.

    @kwwall
    kwwall committed Jun 28, 2025
    Configuration menu
    Copy the full SHA
    8179f72 View commit details
    Browse the repository at this point in the history

Commits on Jun 29, 2025

  1. Added summary of new vulnerability, CVE-2025-5078. 

    Added reference to Security Bulletin #12 for GHSA-r68h-jhhj-9jvm.
    @kwwall
    kwwall committed Jun 29, 2025
    Configuration menu
    Copy the full SHA
    b7ae6d9 View commit details
    Browse the repository at this point in the history

  2. Changed CVE links from nvd.nist.gov to cve.org. 

    Minor update to desription in summary after minor revisions in published CVE.
    @kwwall
    kwwall committed Jun 29, 2025
    Configuration menu
    Copy the full SHA
    a08c9a7 View commit details
    Browse the repository at this point in the history

  3. Update ESAPI release steps. Related to GitHub Issue #891.

    @kwwall
    kwwall committed Jun 29, 2025
    Configuration menu
    Copy the full SHA
    74369bb View commit details
    Browse the repository at this point in the history

Commits on Jul 3, 2025

  1. Removed unused test file.

    @kwwall
    kwwall committed Jul 3, 2025
    Configuration menu
    Copy the full SHA
    45439b4 View commit details
    Browse the repository at this point in the history

  2. Fixed botched property name, ESAPI.enableLegCannonModeAndGetMyAssFire… 

    …d.justification (which I liked better even though it was just a joke during code review) and changed it to ESAPI.dangerouslyAllowUnsafeMethods.justification, which is what it was supposed to be as per the code. The good news is, this mostly harmless as the justification would have always been logged as 'None'.
    @kwwall
    kwwall committed Jul 3, 2025
    Configuration menu
    Copy the full SHA
    a035387 View commit details
    Browse the repository at this point in the history
Loading