ESAPI Javadocs and latest URL

[Jeffrey Walton]

Hi Everyone,

I want to link to ESAPI's docs. For example, the Validator is located
at https://www.javadoc.io/static/org.owasp.esapi/esapi/2.0.1/index.html?org/owasp/esapi/Validator.html
.

However, I always want the latest, and not a particular version. When
I change '2.0.1' to 'latest', it causes a XML error.

How do I link to the latest docs?

Jeff

[Kevin W. Wall]

I think 'latest' only works in the 'Frames' view. E.g.,

https://www.javadoc.io/doc/org.owasp.esapi/esapi/latest/index.html

works fine. But if you want https://www.javadoc.io/static/org.owasp.esapi/esapi/2.5.2.0/org/owasp/esapi/Encoder.html and you flip out '2.5.2.0' with 'latest', you just get the XML 'AccessDenied' error that you referred to. I'm not sure if it is a bug or a feature of the javadoc.io site, but I have noticed it.

When it is important, I usually will URL that works in, using the latest version at the time of writing and then add a note something like "(or substitute '2.5.0.2' in this URL with the current latest version of ESAPI.) Alternately, you can just use

https://www.javadoc.io/doc/org.owasp.esapi/esapi/latest/index.html and then tell them how to navigate to what you are looking for.

But yeah, it's broken IMO. I've had the same issues.

-kevin

--
You received this message because you are subscribed to the Google Groups "ESAPI Project Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to esapi-project-u...@owasp.org.
To view this discussion on the web visit https://groups.google.com/a/owasp.org/d/msgid/esapi-project-users/CAH8yC8mA3c%3DNDTo-5e363QhZV3EfqKAMJRdLnueubRGCcxj7ZQ%40mail.gmail.com.

--

Blog: https://off-the-wall-security.blogspot.com/    | Twitter: @KevinWWall | OWASP ESAPI Project co-lead
NSA: All your crypto bit are belong to us.

[Jeffrey Walton]

On Wed, May 31, 2023 at 12:06 PM Kevin W. Wall <kevin....@gmail.com> wrote:
>
> I think 'latest' only works in the 'Frames' view. E.g.,
> https://www.javadoc.io/doc/org.owasp.esapi/esapi/latest/index.html
>
> works fine. But if you want https://www.javadoc.io/static/org.owasp.esapi/esapi/2.5.2.0/org/owasp/esapi/Encoder.html and you flip out '2.5.2.0' with 'latest', you just get the XML 'AccessDenied' error that you referred to. I'm not sure if it is a bug or a feature of the javadoc.io site, but I have noticed it.
>
> When it is important, I usually will URL that works in, using the latest version at the time of writing and then add a note something like "(or substitute '2.5.0.2' in this URL with the current latest version of ESAPI.) Alternately, you can just use
> https://www.javadoc.io/doc/org.owasp.esapi/esapi/latest/index.html and then tell them how to navigate to what you are looking for.
>
> But yeah, it's broken IMO. I've had the same issues.

https://github.com/maxcellent/javadoc.io/issues/165