Yeah - I need to investigate further before forming an opinion. The key question is what advantage does implementing ESAPI's interfaces in JSecurity offer the project and it's users. Right now I'm not clear on the advantages.

Does anyone else have a better understanding?  Peter?

Jeremy


On Jan 23, 2009, at 12:40 PM, Les Hazlewood wrote:

I opened an issue for this, but I wonder how this would work. JSecurity
itself is a set of interfaces and a reference implementation ;)

In any case, the issue I created is to investigate further to see if it
would be worth implementing.

On Fri, Jan 23, 2009 at 6:45 AM, Peter Ledbrook <[email protected]>wrote:

Hi guys,

Has anyone considered implementing ESAPI in JSecurity?

http://www.owasp.org/index.php/ESAPI

I noticed that they refer to it as a set of interfaces and a reference
implementation. Maybe it would be a good fit for JSecurity?

Cheers,

Peter


Reply via email to