Dave Wichers comments

Results 66 comments of


                                            Dave Wichers

Removing Xerces dependency?

@wilx - We just made some progress removing some of the use of Xerces and replacing parts with what comes with Neko HTMLUnit, which contains its own slimmed down/maintained fork...

Does Antisamy has support for custom css properties " --* " and css-function " var() " and how to define it in the antisamy policy file?

@spassarop - Can you answer this question? Thx

Does Antisamy has support for custom css properties " --* " and css-function " var() " and how to define it in the antisamy policy file?

@spassarop - you are the expert on these internal details so I trust your analysis. I think our only real option here, if you want to investigate is replacing the...

FindSecBugs errors: Unable to call org/owasp/esapi/ESAPI.securityConfiguration()

@h3xstream - As the author/maintainer of FindSecBugs, can you help us figure out whether this is caused by a bug in your SpotBugs plugin? Or something we are doing wrong?

ESAPI's default regex for HeaderValue has a minus-sign bug

Is this really a bug in ESAPI? If not, can you close it. If so, can you confirm it, and add a 'bug' label to it?

Generated SBOMs include some Nulls/Unknowns

@dhruvesh9 - Just submit your pull request and reference this issue. You don't need to have the issue assigned to you to do that. Thanks for researching/proposing a fix.