Where can I find the JAR for ESAPI version 1.4 to download?

[leesonwei]

Where can I find the JAR for ESAPI version 1.4 to download? Or if you have one, you can send it to me at [email protected]. Thank you very much

[kwwall]

If it's not in Maven Central, then I'd try the Internet Wayback Machine, archive.org. Probably need to go back to 2009 or so.

…

-kevin

On Thu, Sep 8, 2022, 4:19 AM leeson.wei ***@***.***> wrote: Where can I find the JAR for ESAPI version 1.4 to download? Or if you have one, you can send it to me at ***@***.*** Thank you very much — Reply to this email directly, view it on GitHub <#739>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAO6PG73ZF6JHVKURNTSYD3V5GOR3ANCNFSM6AAAAAAQHPHTLI> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[kwwall]

@leesonwei - Did this answer your question? If so, please mark it as an answer so everyone will know it's been answered. If it did not answer your question, you should be able to rebuild the 1.4 ESAPI jar from the GitHub source. Unless you have the same Sun JDK version handy--which I think was Java 5 at that time--you are not going to end up generating the same byte code. And even if you did, the bits from the original ESAPI 1.4 jar will differ (because of timestamps in the jar) than whatever you build.

Of course, I would caution you using the ESAPI 1.4 jar for anything production. There were a lot of vulnerabilities (some which have associated CVEs) fixed since that ancient version.