Difference between revisions of "Project Information: OWASP Enterprise Security API Project"

Reinventing the wheel when it comes to developing security controls for every web application or web service leads to wasted time and massive security holes. The OWASP Enterprise Security API (ESAPI) Toolkits help software developers guard against security-related design and implementation flaws. The ESAPI Toolkit architecture is very simple – a collection of classes that encapsulate the key security operations most applications need. ESAPI is designed to make it easy to retrofit security into existing applications, as well as providing a solid foundation for new development. ESAPI comes with an ESAPI filter that minimizes the changes required to your base application. There are ESAPI Toolkits for the following platforms:

• Java EE - This version of the ESAPI Toolkit is currently available.
• .NET - This version of the ESAPI Toolkit is currently under development.
• PHP - This version of the ESAPI Toolkit is currently under development.

Key Project Information

Project Leader
Jeff Williams

Project Contibutors
If any, add here

Mailing List
Subscribe here
Use here

License
BSD license

Project Type
Tool

Provisory Release Quality
(Waiting for Second Reviewer's assessment)
Please see here for complete information.

• About ESAPI and documentation downloads
• ESAPI Demo application - The ESAPI Swingset
  
• JAVA 1.4 compatible JAR for ESAPI v1.4 - Complete & Basic JAR files
  
• Source files for ESAPI v1.4
  
• ESAPI Google Code repository
  
• ESAPI Javadocs
  
• Javadocs' information generation
  
• Problems with the ESAPI may be reported here

OWASP Top Ten
OWASP ASVS Project