HttpParamtervalue for allowing Xml Data

Description

From bhuvanes...@gmail.com on July 14, 2014 14:54:30

Hi All,

I'm trying to modify the <b>validator.httpParamterValue</b> which is having the value as
Validator.HTTPParameterValue=^[\\p{L}\\p{N}.
-/+=_ !$*?@:&ESAPILEG-37;]{0,1000}$.

I'm, unable to parse the xml input :
<dataXML><CreateUpdateClient version='1.0'><commonInput></commonInput><client><clientId>JLTF53SR00C</clientId><roleType>Individual</roleType><names><name prodAssoc=''><nameType>Individual</nameType><prefixes>ADM</prefixes><firstName><

[CDATA[asda]]></middleName><lastName><

[CDATA[DDS]]></unstructuredName><action>add</action></name></names></client></CreateUpdateClient><CCreateUpdateClntandRelations1Rsp><messages rc='0'/><clients><client><clientId>JLTF53SR00C</clientId><nameID>00010</nameID></client></clients></CCreateUpdateClntandRelations1Rsp></dataXML>.

Please provide me a regex which would pass the entire input xml for HttpParamter value.

Original issue: http://code.google.com/p/owasp-esapi-java/issues/detail?id=334

Environment

None

Status

Assignee

Unassigned

Reporter

Max Gelman

Priority

Configure