MySQL CODEC : "_" character not handled properly ? about owasp-esapi-java

[GoogleCodeExporter]

The MySQL codec should ONLY escape single quotes, I agree.

Original comment by [email protected] on 28 Oct 2009 at 7:44

[GoogleCodeExporter]

would this not be the same as the current ANSI encoding in the MySQLEncoder. It 
is
currently only escaping the ' character. If that is what we want to do I will 
resolve
this and commit the fix. 

Original comment by chrisisbeef on 29 Oct 2009 at 5:23

• Changed state: Accepted
• Added labels: Component-Persistence, Milestone-Release2.0, Usability

[GoogleCodeExporter]

Original comment by chrisisbeef on 2 Dec 2009 at 7:54

• Changed state: Duplicate

[GoogleCodeExporter]

This was fixed a while ago - only ' should be encoded (to '')

Mikael Mechoulam, can you confirm this is fixed in the latest ESAPI release?

Original comment by [email protected] on 5 Dec 2009 at 12:33

[GoogleCodeExporter]

Original comment by [email protected] on 5 Dec 2009 at 2:11

• Changed state: Accepted

[GoogleCodeExporter]

Original comment by [email protected] on 5 Dec 2009 at 2:12

• Added labels: Milestone-Release1.0

[GoogleCodeExporter]

Original comment by [email protected] on 5 Dec 2009 at 2:12

• Added labels: Milestone-Release1.4
• Removed labels: Milestone-Release1.0

[GoogleCodeExporter]

No, this was fixed just now in 1.4, still needs fixing in 2.1, discussing with 
group
first.

Original comment by [email protected] on 5 Dec 2009 at 2:22

[GoogleCodeExporter]

PS: Chris, yes, you are right - this is just switching the default "mode" 
variable to 1

Original comment by [email protected] on 5 Dec 2009 at 2:23

[GoogleCodeExporter]

Reassigned to Jim since he is working on Encoders at this time.

Original comment by chrisisbeef on 5 Dec 2009 at 6:05

[GoogleCodeExporter]

Original comment by [email protected] on 29 May 2012 at 3:23

[GoogleCodeExporter]

Original comment by chrisisbeef on 18 Sep 2014 at 4:28

• Added labels: FirstBug