This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "GPC Project Details/OWASP Enterprise Security API"

From OWASP
Jump to: navigation, search
(Created page with '{{Template:<includeonly>{{{1}}}</includeonly><noinclude>OWASP Project Identification Tab</noinclude> | project_name = OWASP Enterprise Security API | project_home_page= | projec…')
 
m (Added Jeremiah Stacey as a contributor.)
 
(19 intermediate revisions by 6 users not shown)
Line 1: Line 1:
 
{{Template:<includeonly>{{{1}}}</includeonly><noinclude>OWASP Project Identification Tab</noinclude>
 
{{Template:<includeonly>{{{1}}}</includeonly><noinclude>OWASP Project Identification Tab</noinclude>
 
| project_name = OWASP Enterprise Security API
 
| project_name = OWASP Enterprise Security API
 +
| project_description = ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI libraries are designed to make it easier for programmers to retrofit security into existing applications. The ESAPI libraries also serve as a solid foundation for new development. Allowing for language-specific differences, all OWASP ESAPI versions have the same basic design:
  
−
| project_home_page=
+
* '''There is a set of security control interfaces.''' They define for example types of parameters that are passed to types of security controls.
−
| project_details_wiki_page=
+
 
 +
* '''There is a reference implementation for each security control.''' The logic is not organization‐specific and the logic is not application‐specific. An example: string‐based input validation.
 +
 
 +
* '''There are optionally your own implementations for each security control.''' There may be application logic contained in these classes which may be developed by or for your organization. An example: enterprise authentication.
 +
| project_license =BSD license
 +
| leader_name =Kevin W. Wall and Matt Seil
 +
| leader_email [email protected]
 +
| past_leaders_special_contributions =Jeff Williams, Dave Wichers, Chris Schmidt, Jim Manico
 +
| maintainer_name =
 +
| maintainer_email =
 +
| maintainer_username =
 +
| contributor_name1 = Jeremiah J. Stacey
 +
| contributor_email1 =
 +
| contributor_username1 =
 +
| contributor_name2 = Chris Schmidt
 +
| contributor_email2 = [email protected]
 +
| contributor_username2 = Chris_Schmidt
 +
| contributor_name3 =
 +
| contributor_email3 =
 +
| contributor_username3 =
 +
| contributor_name4 =Jeff Williams
 +
| contributor_email4 =
 +
| contributor_username4 =
 +
| contributor_name5 =Dave Wichers
 +
| contributor_email5 =
 +
| contributor_username5 =
 +
| contributor_name6 =John Steven
 +
| contributor_email6 =
 +
| contributor_username6 =
 +
 
 +
| contributor_name7 =
 +
| contributor_email7 =
 +
| contributor_username7 =
 +
| contributor_name8 =
 +
| contributor_email8 =
 +
| contributor_username8 =
 +
| contributor_name9 =
 +
| contributor_email9 =
 +
| contributor_username9 =
 +
| contributor_name10 =
 +
| contributor_email10 =
 +
| contributor_username10 =
 +
|
 +
| pamphlet_link = http://www.owasp.org/images/8/81/Esapi-datasheet.pdf
 +
| presentation_link = http://owasp-esapi-java.googlecode.com/files/OWASP%20ESAPI.ppt
 +
| mailing_list_name = esapi-user
 +
| links_url1 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=Downloads
 +
| links_name1 = General ESAPI information
 +
| links_url2 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API/Sub-Projects
 +
| links_name2 = ESAPI/Sub-Projects
 +
| project_road_map =
 +
| project_health_status =
 +
| current_release_name =
 +
| current_release_date =
 +
| current_release_download_link =
 +
| current_release_rating =
 +
| current_release_leader_name =
 +
| current_release_leader_email =
 +
| current_release_leader_username =
 +
| current_release_details = 
 +
| last_reviewed_release_name =
 +
| last_reviewed_release_date =
 +
| last_reviewed_release_download_link =
 +
| last_reviewed_release_rating =
 +
| last_reviewed_release_leader_name =
 +
| last_reviewed_release_leader_email =
 +
| last_reviewed_release_leader_username =
 +
| old_release_name1 =
 +
| old_release_date1 =
 +
| old_release_download_link1 =
 +
| old_release_name2 =
 +
| old_release_date2 =
 +
| old_release_download_link2 =
 +
| old_release_name3 =
 +
| old_release_date3 =
 +
| old_release_download_link3 =
 +
| old_release_name4 =
 +
| old_release_date4 =
 +
| old_release_download_link4 =
 +
| old_release_name5 =
 +
| old_release_date5 =
 +
| old_release_download_link5 =
 +
| last_GPC_update = 4/10/2009
 +
| GPC_Notes = Empty template (ESAPI Global)
 +
| project_home_page = :Category:OWASP_Enterprise_Security_API
 +
| project_details_wiki_page = GPC_Project_Details/OWASP_Enterprise_Security_API
 
}}
 
}}

Latest revision as of 03:11, 29 May 2019

PROJECT INFO
What does this OWASP project offer you?
what is this project?
OWASP Enterprise Security API

Purpose: ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI libraries are designed to make it easier for programmers to retrofit security into existing applications. The ESAPI libraries also serve as a solid foundation for new development. Allowing for language-specific differences, all OWASP ESAPI versions have the same basic design:

  • There is a set of security control interfaces. They define for example types of parameters that are passed to types of security controls.
  • There is a reference implementation for each security control. The logic is not organization‐specific and the logic is not application‐specific. An example: string‐based input validation.
  • There are optionally your own implementations for each security control. There may be application logic contained in these classes which may be developed by or for your organization. An example: enterprise authentication.

License: BSD license

who is working on this project?
Project Leader: Kevin W. Wall and Matt Seil @

Project Maintainer:

Project Contributor(s):

  • Jeremiah J. Stacey
  • Chris Schmidt @
  • Jeff Williams
  • Dave Wichers
  • John Steven
how can you learn more?
Project Pamphlet: View

3x slide Project Presentation: View

Mailing list: Subscribe or read the archives

Project Roadmap: N/A

Main links:

Project Health: Yellow button.JPG Not Reviewed (Provisional)
To be reviewed under Assessment Criteria v2.0

Key Contacts
  • Contact Kevin W. Wall and Matt Seil @ to contribute, review or sponsor this project
  • Contact the GPC to report a problem or concern about this project or to update information.

Retrieved from "https://wiki.owasp.org/index.php?title=GPC_Project_Details/OWASP_Enterprise_Security_API&oldid=251957"