ESAPI WAF

这是OWASP ESAPI 项目提供的一个开源WAF，基于J2EE实现，其主要利用XML的配置方式驱动防火墙。安装时，在Web.xml中将ESAPIWebApplicationFirewallFilter配置为filter，在应用程序之前和之后处理输入和输入。

 

 

 

The ESAPI Web Application Firewall (WAF) is driven by an XML policy file that tells it what rules to enforce in the application. These rules can do a number of things, from simple virtual patching to complex authorization enforcement with BeanShell scripts.