2
java.lang.reflect.InvocationTargetException SecurityConfiguration class (org.owasp.esapi.reference.DefaultSecurityConfiguration) CTOR threw exception.

I get the above error when I try to do

    <cfset esapi=JavaLoader.create('org.owasp.esapi.ESAPI')/>
    <cfdump var="#esapi.randomizer()#"/>

So I'm guessing that I haven't done some setup step for the esapi.. but I"m not sure what..

ztatic
  • 1,181
  • 3
  • 13
  • 21
  • oops can someone please migrate this to stackoverflow? – ztatic Nov 01 '11 at 17:15
  • 1
    I do not have answer, but can you post more of the stack trace? It would help others in diagnosing the problem. – Leigh Nov 21 '11 at 18:33
  • here is the stack trace http://pastebin.com/1hRxdHsw – ztatic Nov 21 '11 at 23:16
  • 1
    I am not familiar with this library. But the error message is saying it the configuration file ie `ESAPI.properties could not be loaded by any means`. Total shot in the dark, but you might review this thread on configuration file location. Maybe you could place it inside the jar? http://stackoverflow.com/questions/7696423/trying-to-use-esapi-but-getting-error/7697740#7697740 – Leigh Nov 21 '11 at 23:36

2 Answers2

3

The error message is saying it cannot find the configuration file ie ESAPI.properties could not be loaded by any means. Total shot in the dark, but this thread suggests it will be detected if you place it inside the jar within the resources folder ie

   /resources/ESAPI.properties
Community
  • 1
  • 1
Leigh
  • 28,765
  • 10
  • 55
  • 103
0

Have you added the esapi jar to your CF server classpath?

Jake Feasel
  • 16,785
  • 5
  • 53
  • 66