Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Performance

Description

From guptanav...@gmail.com on July 08, 2014 14:33:53

I Had a Server facing around 10000 requests per second. I Added Esapi for Security checks ( mostly getValidInput) and it crashed the CPU. CPU Utilization went to 90&ESAPILEG-37; with around 1500 requests per sec. I use ESAPI.validator().getValidInput(params) everytime i need to check. Am i doing something wrong or is it a performance bug?? Please help asap. I am stuck. DO I have to implement singleton class somewhere?

Original issue: http://code.google.com/p/owasp-esapi-java/issues/detail?id=332

Environment

None

Activity

Show:

Chris Schmidt January 5, 2015 at 7:18 AM

please review and update the documentation if necessary or close out

Max Gelman November 13, 2014 at 6:27 PM

From guptanav...@gmail.com on July 08, 2014 15:55:03

Figured out the issue. In ValidInput we were not setting Encoder to true or false Manually. So it used to read the properties and cause a Severe Performance Issue. As a Data for 1 lakh Requests it took 3 times more time when no input was provided. Maybe we should mention it in the documents somewhere as a Safe Practice.

Max Gelman November 13, 2014 at 6:27 PM

From guptanav...@gmail.com on July 08, 2014 13:26:12

Please somebody reply. I have a deadline to meet and i have no clue what to do.

Max Gelman November 13, 2014 at 6:27 PM

From guptanav...@gmail.com on July 08, 2014 11:34:46

fyi I also use ESAPI.encoder().canonicalize()

Details

Assignee

Reporter

Labels

Created November 13, 2014 at 6:27 PM
Updated January 5, 2015 at 7:24 AM