Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: ESAPI/esapi-java-legacy
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 2.7.0.0
Choose a base ref
...
head repository: ESAPI/esapi-java-legacy
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: develop
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 15 commits
  • 10 files changed
  • 3 contributors

Commits on Jun 28, 2025

  1. Change to reference 2.7.0.0 as the latest ESAPI release.

    @kwwall
    kwwall committed Jun 28, 2025
    Configuration menu
    Copy the full SHA
    bf9804a View commit details
    Browse the repository at this point in the history

  2. Update Description in Summary with CNA's CVE description.

    @kwwall
    kwwall committed Jun 28, 2025
    Configuration menu
    Copy the full SHA
    0cd00c0 View commit details
    Browse the repository at this point in the history

  3. Update pom.xmlfor next planned (SNAPSHOT) release.

    @kwwall
    kwwall committed Jun 28, 2025
    Configuration menu
    Copy the full SHA
    126e0b7 View commit details
    Browse the repository at this point in the history

  4. Correct name and URL for item on ESAPI's GitHub Discussion list.

    @kwwall
    kwwall committed Jun 28, 2025
    Configuration menu
    Copy the full SHA
    8179f72 View commit details
    Browse the repository at this point in the history

Commits on Jun 29, 2025

  1. Added summary of new vulnerability, CVE-2025-5078. 

    Added reference to Security Bulletin #12 for GHSA-r68h-jhhj-9jvm.
    @kwwall
    kwwall committed Jun 29, 2025
    Configuration menu
    Copy the full SHA
    b7ae6d9 View commit details
    Browse the repository at this point in the history

  2. Changed CVE links from nvd.nist.gov to cve.org. 

    Minor update to desription in summary after minor revisions in published CVE.
    @kwwall
    kwwall committed Jun 29, 2025
    Configuration menu
    Copy the full SHA
    a08c9a7 View commit details
    Browse the repository at this point in the history

  3. Update ESAPI release steps. Related to GitHub Issue #891.

    @kwwall
    kwwall committed Jun 29, 2025
    Configuration menu
    Copy the full SHA
    74369bb View commit details
    Browse the repository at this point in the history

Commits on Jul 3, 2025

  1. Removed unused test file.

    @kwwall
    kwwall committed Jul 3, 2025
    Configuration menu
    Copy the full SHA
    45439b4 View commit details
    Browse the repository at this point in the history

  2. Fixed botched property name, ESAPI.enableLegCannonModeAndGetMyAssFire… 

    …d.justification (which I liked better even though it was just a joke during code review) and changed it to ESAPI.dangerouslyAllowUnsafeMethods.justification, which is what it was supposed to be as per the code. The good news is, this mostly harmless as the justification would have always been logged as 'None'.
    @kwwall
    kwwall committed Jul 3, 2025
    Configuration menu
    Copy the full SHA
    a035387 View commit details
    Browse the repository at this point in the history

Commits on Oct 10, 2025

  1. Applying pom changes required for OSSRH Migration.

    @jeremiahjstacey
    jeremiahjstacey committed Oct 10, 2025
    Configuration menu
    Copy the full SHA
    57227dd View commit details
    Browse the repository at this point in the history

Commits on Oct 17, 2025

  1. Setting the deployment name to the project name to make our deploymen… 

    …ts easier to locate in the maven central repository.
    @jeremiahjstacey
    jeremiahjstacey committed Oct 17, 2025
    Configuration menu
    Copy the full SHA
    f7eb257 View commit details
    Browse the repository at this point in the history

  2. Appending the project version to the maven central deployment name. T… 

    …hought I could use the project name to create a customized filter URL to simplify the link in the instructions, but that doesn't appear to work as desired. This qualifier should make it easier to identify the desired project contents much easier among multiple deployments.
    @jeremiahjstacey
    jeremiahjstacey committed Oct 17, 2025
    Configuration menu
    Copy the full SHA
    dc2d3c0 View commit details
    Browse the repository at this point in the history

Commits on Oct 20, 2025

  1. Updating release steps documentation for the OSSRH migration.

    @jeremiahjstacey
    jeremiahjstacey committed Oct 20, 2025
    Configuration menu
    Copy the full SHA
    5b6f2c2 View commit details
    Browse the repository at this point in the history

Commits on Oct 21, 2025

  1. Documentation - Release Steps Updates 

    Updating section 2.3 with sonatype-supported gpg key servers
Updating section 7 with new Reference URLs for updated workflow.
    @jeremiahjstacey
    jeremiahjstacey committed Oct 21, 2025
    Configuration menu
    Copy the full SHA
    985233f View commit details
    Browse the repository at this point in the history

Commits on Oct 23, 2025

  1. Merge pull request #900 from jeremiahjstacey/ossrh_updates 

    Ossrh Migration Support
    @xeno6696
    xeno6696 authored Oct 23, 2025
    Configuration menu
    Copy the full SHA
    58be169 View commit details
    Browse the repository at this point in the history
Loading