Deprecated API

Contents

• Deprecated Fields
• Deprecated Methods
• Deprecated Constructors

Deprecated Fields

Field and Description
org.owasp.esapi.Encoder.CHAR_ALPHANUMERICS Use EncoderConstants.CHAR_ALPHANUMERICS instead
org.owasp.esapi.Encoder.CHAR_DIGITS Use EncoderConstants.CHAR_DIGITS instead
org.owasp.esapi.Encoder.CHAR_LETTERS Use EncoderConstants.CHAR_LETTERS instead
org.owasp.esapi.Encoder.CHAR_LOWERS Use EncoderConstants.CHAR_LOWERS instead
org.owasp.esapi.Encoder.CHAR_PASSWORD_DIGITS Use EncoderConstants.CHAR_PASSWORD_DIGITS instead
org.owasp.esapi.Encoder.CHAR_PASSWORD_LETTERS Use EncoderConstants.CHAR_PASSWORD_LETTERS instead
org.owasp.esapi.Encoder.CHAR_PASSWORD_LOWERS Use EncoderConstants.CHAR_PASSWORD_LOWERS instead
org.owasp.esapi.Encoder.CHAR_PASSWORD_SPECIALS Use EncoderConstants.CHAR_PASSWORD_SPECIALS instead
org.owasp.esapi.Encoder.CHAR_PASSWORD_UPPERS Use EncoderConstants.CHAR_PASSWORD_UPPERS instead
org.owasp.esapi.Encoder.CHAR_SPECIALS Use EncoderConstants.CHAR_SPECIALS instead
org.owasp.esapi.Encoder.CHAR_UPPERS Use EncoderConstants.CHAR_UPPERS instead
org.owasp.esapi.reference.DefaultSecurityConfiguration.MAX_FILE_NAME_LENGTH It is not clear whether this is intended to be the max file name length for the basename(1) of a file or the max full path name length of a canonical full path name. Since it is not used anywhere in the ESAPI code it is being deprecated and scheduled to be removed in release 2.1.

Deprecated Methods

Method and Description
org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController.assertAuthorizedForData(String, Object)
org.owasp.esapi.reference.DefaultAccessController.assertAuthorizedForFile(String)
org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController.assertAuthorizedForFile(String)
org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController.assertAuthorizedForFunction(String)
org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController.assertAuthorizedForService(String)
org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController.assertAuthorizedForURL(String)
org.owasp.esapi.crypto.CryptoHelper.computeDerivedKey(SecretKey, int, String) UseKeyDerivationFunction instead. This method will be removed as of ESAPI release 2.1 so if you are using this, please change your code.
org.owasp.esapi.filters.SecurityWrapperResponse.encodeRedirectUrl(String) in servlet spec 2.1. Use SecurityWrapperResponse.encodeRedirectUrl(String) instead.
org.owasp.esapi.filters.SecurityWrapperResponse.encodeUrl(String) in servlet spec 2.1. Use SecurityWrapperResponse.encodeURL(String) instead.
org.owasp.esapi.waf.configuration.AppGuardianConfiguration.getLogDirectory()
org.owasp.esapi.waf.configuration.AppGuardianConfiguration.getLogLevel()
org.owasp.esapi.filters.SecurityWrapperRequest.getRealPath(String) in servlet spec 2.1. Use ServletContext.getRealPath(String) instead.
org.owasp.esapi.crypto.CipherText.getSerialVersionUID() Use CipherText.cipherTextVersion instead. Will disappear as of ESAPI 2.1.
org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController.isAuthorizedForData(String, Object)
org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController.isAuthorizedForFile(String)
org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController.isAuthorizedForFunction(String)
org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController.isAuthorizedForService(String)
org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController.isAuthorizedForURL(String)
org.owasp.esapi.filters.SecurityWrapperRequest.isRequestedSessionIdFromUrl() in servlet spec 2.1. Use SecurityWrapperRequest.isRequestedSessionIdFromURL() instead.
org.owasp.esapi.reference.crypto.DefaultEncryptedProperties.main(String[]) Use EncryptedPropertiesUtils instead, which allows creating, reading, and writing encrypted properties.
org.owasp.esapi.SecurityConfiguration.setCipherTransformation(String) To be replaced by new class in ESAPI 2.1, but here if you need it until then. Details of replacement forthcoming to ESAPI-Dev list.
org.owasp.esapi.waf.configuration.AppGuardianConfiguration.setLogDirectory(String)
org.owasp.esapi.waf.configuration.AppGuardianConfiguration.setLogLevel(Level)
org.owasp.esapi.filters.SecurityWrapperResponse.setStatus(int, String) In Servlet spec 2.1.

Deprecated Constructors

Constructor and Description
org.owasp.esapi.reference.AbstractAccessReferenceMap(Set
org.owasp.esapi.reference.AbstractAccessReferenceMap(Set
org.owasp.esapi.codecs.MySQLCodec(int)