Error using esapi with CF8 and JavaLoader

Question

java.lang.reflect.InvocationTargetException SecurityConfiguration class (org.owasp.esapi.reference.DefaultSecurityConfiguration) CTOR threw exception. 

I get the above error when I try to do

    <cfset esapi=JavaLoader.create('org.owasp.esapi.ESAPI')/>
    <cfdump var="#esapi.randomizer()#"/>

So I'm guessing that I haven't done some setup step for the esapi.. but I"m not sure what..

Answer 1

The error message is saying it cannot find the configuration file ie ESAPI.properties could not be loaded by any means. Total shot in the dark, but this thread suggests it will be detected if you place it inside the jar within the resources folder ie

   /resources/ESAPI.properties

Answer 2

Have you added the esapi jar to your CF server classpath?