Difference between revisions of "GPC Project Details/OWASP Enterprise Security API"

From OWASP
Jump to: navigation, search
m (Undo revision 90432 by Jmanico (Talk))
Line 51: Line 51:
 
| links_url1 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=Downloads
 
| links_url1 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=Downloads
 
| links_name1 = General ESAPI information
 
| links_name1 = General ESAPI information
| links_url2 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=Java_EE
+
| links_url2 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API/Sub-Projects
| links_name2 = ESAPI for Java EE
+
| links_name2 = ESAPI/Sub-Projects
| links_url3 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=.NET
+
| links_name3 = ESAPI for .NET
+
| links_url4 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=Classic_ASP
+
| links_name4 = ESAPI for Classic ASP
+
| links_url5 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=PHP
+
| links_name5 = ESAPI for PHP
+
| links_url6 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=ColdFusion.2FCFML
+
| links_name6 = ESAPI for ColdFusion/CFML
+
| links_url7 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=Python
+
| links_name7 = ESAPI for Python
+
| links_url8 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=JavaScript
+
| links_name8 = ESAPI for JavaScript
+
| links_url9 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=Haskell
+
| links_name9 = ESAPI for Haskell
+
| links_url10 = http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API#tab=Ruby 
+
| links_name10 = ESAPI for Ruby
+
 
| project_road_map =  
 
| project_road_map =  
 
| project_health_status =  
 
| project_health_status =  

Revision as of 13:21, 15 September 2011

PROJECT INFO
What does this OWASP project offer you?
what is this project?
OWASP Enterprise Security API

Purpose: ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI libraries are designed to make it easier for programmers to retrofit security into existing applications. The ESAPI libraries also serve as a solid foundation for new development. Allowing for language-specific differences, all OWASP ESAPI versions have the same basic design:

  • There is a set of security control interfaces. They define for example types of parameters that are passed to types of security controls.
  • There is a reference implementation for each security control. The logic is not organization‐specific and the logic is not application‐specific. An example: string‐based input validation.
  • There are optionally your own implementations for each security control. There may be application logic contained in these classes which may be developed by or for your organization. An example: enterprise authentication.

License: BSD license

who is working on this project?
Project Leader: Jeff Williams @

Project Maintainer: Jim Manico @

Project Contributor(s):

  • Chris Schmidt
  • Kevin Wall
how can you learn more?
Project Pamphlet: View

3x slide Project Presentation: View

Mailing list: Subscribe or read the archives

Project Roadmap: N/A

Main links:

Project Health: Yellow button.JPG Not Reviewed (Provisional)
To be reviewed under Assessment Criteria v2.0

Key Contacts
  • Contact Jeff Williams @ to contribute, review or sponsor this project
  • Contact the GPC to report a problem or concern about this project or to update information.