[jira] [Created] (SHIRO-731) Use OWasp Java Encoder to escape user supplied content to the logs

[Colm O hEigeartaigh (Jira)]

Colm O hEigeartaigh created SHIRO-731:
-----------------------------------------

             Summary: Use OWasp Java Encoder to escape user supplied content to 
the logs
                 Key: SHIRO-731
                 URL: https://issues.apache.org/jira/browse/SHIRO-731
             Project: Shiro
          Issue Type: Improvement
            Reporter: Colm O hEigeartaigh
             Fix For: 1.5.0


We should use the Owasp java encoder to escape user supplied content to the 
logs, to avoid CRLF type attacks.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)