ESAPI 2.5.3.0 now available

[kwwall]

A new ESAPI release (2.5.3.0) is now available.

Major changes

• The two Validator.isValidSafeHTML methods were deprecated. More details on this in GitHub Security Advisory GHSA-r68h-jhhj-9jvm.
• There is now a version of the ESAPI jar that should support the Jakarta Servlet API. See the release notes and Discussion Add support for Jakarta Servlet API Specification #768 for details.
• Updated to AntiSamy 1.7.4 which addresses CVE-2023-43643 , which really was not exploitable via ESAPI anyway. More details are in the release notes.