You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@shiro.apache.org by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2019/11/19 16:53:00 UTC

[jira] [Created] (SHIRO-731) Use OWasp Java Encoder to escape user supplied content to the logs

Colm O hEigeartaigh created SHIRO-731:
-----------------------------------------

             Summary: Use OWasp Java Encoder to escape user supplied content to the logs
                 Key: SHIRO-731
                 URL: https://issues.apache.org/jira/browse/SHIRO-731
             Project: Shiro
          Issue Type: Improvement
            Reporter: Colm O hEigeartaigh
             Fix For: 1.5.0


We should use the Owasp java encoder to escape user supplied content to the logs, to avoid CRLF type attacks.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)