Enterprise Security API (ESAPI) 2.5.3.1

------------------------------- Top-level license --------------------------

The BSD License

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

Neither the name of the OWASP Foundation nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

--------------------------------------------------------------------------------------------

------------------------------- Copyright notices --------------------------

Please note that:

1) The LICENSE file only refers to the licensing of the source and binary code of ESAPI.

For example, the actual ESAPI JAR file is only licensed under "The BSD License".

2) The LICENSE-CONTENT file only refers to the licensing of the content and documentation of ESAPI.

For example, the documentation directory is only licensed under the Creative Commons/ShareAlike 3.0 Unported license.

---------------------------- Fourth-party information ----------------------

== NAME OF DEPENDENCY 1

commons-beanutils » commons-beanutils

== License Type

Apache License, Version 2.0

== Copyright Notices

Apache Commons BeanUtils

This product includes software developed at

The Apache Software Foundation (http://www.apache.org/).

--------------------------------(separator)---------------------------------

== NAME OF DEPENDENCY 2

commons-configuration » commons-configuration

== License Type

Apache License, Version 2.0

== Copyright Notices

Apache Commons Configuration

This product includes software developed at

The Apache Software Foundation (http://www.apache.org/).

--------------------------------(separator)---------------------------------

== NAME OF DEPENDENCY 3

commons-fileupload » commons-fileupload

== License Type

Apache License, Version 2.0

== Copyright Notices

Apache Commons FileUpload

This product includes software developed at

The Apache Software Foundation (http://www.apache.org/).

--------------------------------(separator)---------------------------------

== NAME OF DEPENDENCY 4

commons-io » commons-io

== License Type

Apache License, Version 2.0

== Copyright Notices

Apache Commons IO

This product includes software developed at

The Apache Software Foundation (https://www.apache.org/).

--------------------------------(separator)---------------------------------

== NAME OF DEPENDENCY 5

commons-lang » commons-lang

== License Type

Apache License, Version 2.0

== Copyright Notices

Apache Commons Lang

This product includes software developed by

The Apache Software Foundation (http://www.apache.org/).

--------------------------------(separator)---------------------------------

== NAME OF DEPENDENCY 6

org.apache-extras.beanshell » bsh

== License Type

Apache License, Version 2.0

== Copyright Notices

BeanShell Scripting for Java

Licensed under the Apache License, Version 2.0.

Granted to the Apache Software Foundation 2012

--------------------------------(separator)---------------------------------

== NAME OF DEPENDENCY 7

org.apache.commons » commons-collections4

== License Type

Apache License, Version 2.0

== Copyright Notices

Apache Commons Collections

This product includes software developed at

The Apache Software Foundation (http://www.apache.org/).

--------------------------------(separator)---------------------------------

== NAME OF DEPENDENCY 8

org.owasp.antisamy » antisamy

== License Type

BSD 3

== Copyright Notices

Redistribution and use in source and binary forms, with or without modification, are permitted

provided that the following conditions are met:

Redistributions of source code must retain the above copyright notice, this list of conditions

and the following disclaimer. Redistributions in binary form must reproduce the above copyright

notice, this list of conditions and the following disclaimer in the documentation and/or other

materials provided with the distribution. Neither the name of OWASP nor the names of its

contributors may be used to endorse or promote products derived from this software without

specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR

IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND

FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR

CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL

DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,

DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER

IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT

OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

--------------------------------(separator)---------------------------------

== NAME OF DEPENDENCY 9

org.slf4j » slf4j-api

== License Type

MIT License

== Copyright Notices

See license text

--------------------------------(separator)---------------------------------

== NAME OF DEPENDENCY 10

xml-apis » xml-apis

== License Type

Apache License, Version 2.0

=========================================================================

== NOTICE file corresponding to section 4(d) of the Apache License, ==

== Version 2.0, in this case for the Apache xml-commons xml-apis ==

== distribution. ==

=========================================================================

Apache XML Commons XML APIs

This product includes software developed at

The Apache Software Foundation (http://www.apache.org/).

Portions of this software were originally based on the following:

--------------------------------(separator)---------------------------------

== License Type W3C

xml-commons/java/external/LICENSE.dom-software.txt $Id: LICENSE.dom-software.txt 734314 2009-01-14 03:33:27Z mrglavas $

This license came from: http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip (COPYRIGHT.html)

W3C® SOFTWARE NOTICE AND LICENSE

European Research Consortium for Informatics and Mathematics, Keio University).

The DOM bindings are published under the W3C Software Copyright Notice and

License. The software license requires "Notice of any changes or modifications

to the W3C files, including the date changes were made." Consequently, modified

versions of the DOM bindings must document that they do not conform to the W3C

standard; in the case of the IDL definitions, the pragma prefix can no longer

be 'w3c.org'; in the case of the Java language binding, the package names can no

longer be in the 'org.w3c' package.

Note: The original version of the W3C Software Copyright Notice and License could

be found at http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231

This work (and included software, documentation such as READMEs, or other

related items) is being provided by the copyright holders under the following

license. By obtaining, using and/or copying this work, you (the licensee) agree

that you have read, understood, and will comply with the following terms and

conditions.

Permission to copy, modify, and distribute this software and its documentation,

with or without modification, for any purpose and without fee or royalty is

hereby granted, provided that you include the following on ALL copies of the

software and documentation or portions thereof, including modifications:

1. The full text of this NOTICE in a location viewable to users of the

redistributed or derivative work.

2. Any pre-existing intellectual property disclaimers, notices, or terms

and conditions. If none exist, the W3C Software Short Notice should be

included (hypertext is preferred, text is permitted) within the body

of any redistributed or derivative code.

3. Notice of any changes or modifications to the files, including the date

changes were made. (We recommend you provide URIs to the location from

which the code is derived.)

THIS SOFTWARE AND DOCUMENTATION IS PROVIDED "AS IS," AND COPYRIGHT HOLDERS MAKE

NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED

TO, WARRANTIES OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE OR THAT

THE USE OF THE SOFTWARE OR DOCUMENTATION WILL NOT INFRINGE ANY THIRD PARTY

PATENTS, COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS.

CONSEQUENTIAL DAMAGES ARISING OUT OF ANY USE OF THE SOFTWARE OR DOCUMENTATION.

The name and trademarks of copyright holders may NOT be used in advertising or

publicity pertaining to the software without specific, written prior permission.

Title to copyright in this software and any associated documentation will at

all times remain with copyright holders.

--------------------------------(separator)---------------------------------

== License Type SAX

xml-commons/java/external/LICENSE.sax.txt $Id: LICENSE.sax.txt 225954 2002-01-31 23:26:48Z curcuru $

This license came from: http://www.megginson.com/SAX/copying.html

However please note future versions of SAX may be covered

under http://saxproject.org/?selected=pd

This page is now out of date -- see the new SAX site at

http://www.saxproject.org/ for more up-to-date

releases and other information. Please change your bookmarks.

SAX2 is Free!

I hereby abandon any property rights to SAX 2.0 (the Simple API for

XML), and release all of the SAX 2.0 source code, compiled code, and

documentation contained in this distribution into the Public Domain.

SAX comes with NO WARRANTY or guarantee of fitness for any

purpose.

David Megginson, david@megginson.com

2000-05-05

--------------------------------(separator)---------------------------------

== NAME OF DEPENDENCY 11

xom » xom

== License Type

The GNU Lesser General Public License, Version 2.1

== Copyright Notices

XOM is a dual streaming/tree-based API for processing XML with Java.

This library is free software; you can redistribute it and/or modify

it under the terms of version 2.1 of the GNU Lesser General Public

License as published by the Free Software Foundation.

This library is distributed in the hope that it will be useful,

but WITHOUT ANY WARRANTY; without even the implied warranty of

MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

GNU Lesser General Public License for more details.

You should have received a copy of the GNU Lesser General Public

License along with this library. If not, see

<https://www.gnu.org/licenses/>

You can contact Elliotte Rusty Harold by sending e-mail to

elharo@ibiblio.org. Please include the word "XOM" in the

subject line. For more information see https://xom.nu/

or ask a question on the xom-interest mailing list.

--------------------------------(separator)---------------------------------

== LICENSES

--------------------------------(separator)---------------------------------

Apache License

Version 2.0, January 2004

This product includes software developed at The Apache Software Foundation (http://www.apache.org/).

Licensed under the Apache Software License, Version 2.0, Version 2.0 (the "License");

you may not use this file except in compliance with the License.

You may obtain a copy of the License at

https://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software

distributed under the License is distributed on an "AS IS" BASIS,

WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

See the License for the specific language governing permissions and

limitations under the License.

--------------------------------(separator)---------------------------------

BSD 3

== Text of license (BSD 3)

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

--------------------------------(separator)---------------------------------

MIT License

== Text of license (MIT License)

Permission is hereby granted, free of charge, to any person obtaining

a copy of this software and associated documentation files (the

"Software"), to deal in the Software without restriction, including

without limitation the rights to use, copy, modify, merge, publish,

distribute, sublicense, and/or sell copies of the Software, and to

permit persons to whom the Software is furnished to do so, subject to

the following conditions:

The above copyright notice and this permission notice shall be

included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND

NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE

LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION

OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION

WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

--------------------------------(separator)---------------------------------

W3C License

== Text of license (W3C License)

License

By obtaining and/or copying this work, you (the licensee) agree that you have read, understood, and will comply with the following terms and conditions.

Permission to copy, modify, and distribute this work, with or without modification, for any purpose and without fee or royalty is hereby granted, provided that you include the following on ALL copies of the work or portions thereof, including modifications:

The full text of this NOTICE in a location viewable to users of the redistributed or derivative work.

Any pre-existing intellectual property disclaimers, notices, or terms and conditions. If none exist, the W3C software and document short notice should be included.

Notice of any changes or modifications, through a copyright statement on the new code or document such as "This software or document includes material copied from or derived from [title and URI of the W3C document]. Copyright © [$year-of-document] World Wide Web Consortium. https://www.w3.org/copyright/software-license-2023/"

Disclaimers

THIS WORK IS PROVIDED "AS IS," AND COPYRIGHT HOLDERS MAKE NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE OR THAT THE USE OF THE SOFTWARE OR DOCUMENT WILL NOT INFRINGE ANY THIRD PARTY PATENTS, COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS.

COPYRIGHT HOLDERS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF ANY USE OF THE SOFTWARE OR DOCUMENT.

The name and trademarks of copyright holders may NOT be used in advertising or publicity pertaining to the work without specific, written prior permission. Title to copyright in this work will at all times remain with copyright holders.

--------------------------------(separator)---------------------------------

The GNU Lesser General Public License

== Text of license (The GNU Lesser General Public License, Version 2.1)

GNU LESSER GENERAL PUBLIC LICENSE

Version 3, 29 June 2007

Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.

This version of the GNU Lesser General Public License incorporates the terms and conditions of version 3 of the GNU General Public License, supplemented by the additional permissions listed below.

0. Additional Definitions.

As used herein, “this License” refers to version 3 of the GNU Lesser General Public License, and the “GNU GPL” refers to version 3 of the GNU General Public License.

“The Library” refers to a covered work governed by this License, other than an Application or a Combined Work as defined below.

An “Application” is any work that makes use of an interface provided by the Library, but which is not otherwise based on the Library. Defining a subclass of a class defined by the Library is deemed a mode of using an interface provided by the Library.

A “Combined Work” is a work produced by combining or linking an Application with the Library. The particular version of the Library with which the Combined Work was made is also called the “Linked Version”.

The “Minimal Corresponding Source” for a Combined Work means the Corresponding Source for the Combined Work, excluding any source code for portions of the Combined Work that, considered in isolation, are based on the Application, and not on the Linked Version.

The “Corresponding Application Code” for a Combined Work means the object code and/or source code for the Application, including any data and utility programs needed for reproducing the Combined Work from the Application, but excluding the System Libraries of the Combined Work.

1. Exception to Section 3 of the GNU GPL.

You may convey a covered work under sections 3 and 4 of this License without being bound by section 3 of the GNU GPL.

2. Conveying Modified Versions.

If you modify a copy of the Library, and, in your modifications, a facility refers to a function or data to be supplied by an Application that uses the facility (other than as an argument passed when the facility is invoked), then you may convey a copy of the modified version:

a) under this License, provided that you make a good faith effort to ensure that, in the event an Application does not supply the function or data, the facility still operates, and performs whatever part of its purpose remains meaningful, or

b) under the GNU GPL, with none of the additional permissions of this License applicable to that copy.

3. Object Code Incorporating Material from Library Header Files.

The object code form of an Application may incorporate material from a header file that is part of the Library. You may convey such object code under terms of your choice, provided that, if the incorporated material is not limited to numerical parameters, data structure layouts and accessors, or small macros, inline functions and templates (ten or fewer lines in length), you do both of the following:

a) Give prominent notice with each copy of the object code that the Library is used in it and that the Library and its use are covered by this License.

b) Accompany the object code with a copy of the GNU GPL and this license document.

4. Combined Works.

You may convey a Combined Work under terms of your choice that, taken together, effectively do not restrict modification of the portions of the Library contained in the Combined Work and reverse engineering for debugging such modifications, if you also do each of the following:

a) Give prominent notice with each copy of the Combined Work that the Library is used in it and that the Library and its use are covered by this License.

b) Accompany the Combined Work with a copy of the GNU GPL and this license document.

c) For a Combined Work that displays copyright notices during execution, include the copyright notice for the Library among these notices, as well as a reference directing the user to the copies of the GNU GPL and this license document.

d) Do one of the following:

0) Convey the Minimal Corresponding Source under the terms of this License, and the Corresponding Application Code in a form suitable for, and under terms that permit, the user to recombine or relink the Application with a modified version of the Linked Version to produce a modified Combined Work, in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source.

1) Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (a) uses at run time a copy of the Library already present on the user's computer system, and (b) will operate properly with a modified version of the Library that is interface-compatible with the Linked Version.

e) Provide Installation Information, but only if you would otherwise be required to provide such information under section 6 of the GNU GPL, and only to the extent that such information is necessary to install and execute a modified version of the Combined Work produced by recombining or relinking the Application with a modified version of the Linked Version. (If you use option 4d0, the Installation Information must accompany the Minimal Corresponding Source and Corresponding Application Code. If you use option 4d1, you must provide the Installation Information in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source.)

5. Combined Libraries.

You may place library facilities that are a work based on the Library side by side in a single library together with other library facilities that are not Applications and are not covered by this License, and convey such a combined library under terms of your choice, if you do both of the following:

a) Accompany the combined library with a copy of the same work based on the Library, uncombined with any other library facilities, conveyed under the terms of this License.

b) Give prominent notice with the combined library that part of it is a work based on the Library, and explaining where to find the accompanying uncombined form of the same work.

6. Revised Versions of the GNU Lesser General Public License.

The Free Software Foundation may publish revised and/or new versions of the GNU Lesser General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.

Each version is given a distinguishing version number. If the Library as you received it specifies that a certain numbered version of the GNU Lesser General Public License “or any later version” applies to it, you have the option of following the terms and conditions either of that published version or of any later version published by the Free Software Foundation. If the Library as you received it does not specify a version number of the GNU Lesser General Public License, you may choose any version of the GNU Lesser General Public License ever published by the Free Software Foundation.

If the Library as you received it specifies that a proxy can decide whether future versions of the GNU Lesser General Public License shall apply, that proxy's public statement of acceptance of any version is permanent authorization for you to choose that version for the Library.

Last Published Monday, December 2, 2024