We are currently migrating our Spring Boot application to version 3.0.
In Spring Boot 3.0 they've migrated all dependencies from Java EE to Jakarta EE APIs. Now Jakarta EE 10 dependencies are used.
We are using the OWASP Java Encoder library and specifically the JSP module to encode user input. For example:
<%@ taglib prefix="e" uri="https://www.owasp.org/index.php/OWASP_Java_Encoder_Project" %>
<e:forHtml value="${user.name}" />
This is causing the following error:
java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.SimpleTagSupport
This is because we are now using Jakarta Servlet 5.0 and the packages have been changed from javax.* to jakarta.*.
javax.servlet.jsp.tagext.SimpleTagSupport is now jakarta.servlet.jsp.tagext.SimpleTagSupport.
Are there any plans for a version using Jakarta Servlet 5.0?
I noticed that there's a discussion in the OWASP ESAPI project which deals with the same problem.
We are currently migrating our Spring Boot application to version 3.0.
In Spring Boot 3.0 they've migrated all dependencies from Java EE to Jakarta EE APIs. Now Jakarta EE 10 dependencies are used.
We are using the OWASP Java Encoder library and specifically the JSP module to encode user input. For example:
This is causing the following error:
This is because we are now using Jakarta Servlet 5.0 and the packages have been changed from
javax.*tojakarta.*.javax.servlet.jsp.tagext.SimpleTagSupportis nowjakarta.servlet.jsp.tagext.SimpleTagSupport.Are there any plans for a version using Jakarta Servlet 5.0?
I noticed that there's a discussion in the OWASP ESAPI project which deals with the same problem.