https://wiki.owasp.org/api.php?action=feedcontributions&feedformat=atom&user=Mallory
OWASP - User contributions [en]
2026-04-28T10:07:38Z
User contributions
MediaWiki 1.27.2
https://wiki.owasp.org/index.php?title=Chapters_Assigned&diff=15528
Chapters Assigned
2007-01-18T02:55:14Z
<p>Mallory: /* Design review */</p>
<hr />
<div>==Methodology==<br />
<br />
#Code Review Introduction<br />
#Steps and Roles<br />
#Code Review Processes<br />
<br />
== Design review ==<br />
#Designing for security <br />
## - M Roxberry(.NET)<br />
## - Paolo Perego (Java)<br />
## - Andrew van der Stock (PHP) <br />
## - Paolo Perego (C)<br />
## - C++<br />
## - Andrew van der Stock (MySQL)<br />
## - Mallory (AJAX)<br />
<br />
==Examples by Vulnerability==<br />
#Reviewing Code for Buffer Overruns and Overflows - 70%<br />
#Reviewing Code for OS Injection - 70%<br />
#Reviewing Code for SQL Injection - 70%<br />
#Reviewing Code for Data Validation - Jenelle Chapman / E Keary<br />
#Reviewing Code for Error Handling - Jenelle Chapman<br />
#Reviewing Code for Logging Issues - 70%<br />
#Reviewing The Secure Code Environment - E Keary<br />
#Transaction Analysis - E Keary<br />
#Authorization (Currently linked to "The Development Guide")<br />
#Authentication (Code review)<br />
#Session Integrity<br />
#Cross Site Request Forgery<br />
#Cryptography (Currently linked to "The Development Guide")<br />
#Dangerous HTTP Methods ( Secure deployment)<br />
#Race Conditions<br />
<br />
== Language specific best practice ==<br />
<br />
===Java=== <br />
#Inner classes (Paolo Perego)<br />
#Class comparison (Paolo Perego)<br />
#Cloneable classes (Paolo Perego)<br />
#Serializable classes (Paolo Perego)<br />
#Package scope and encapsulation (Paolo Perego)<br />
#Mutable objects (Paolo Perego)<br />
#Private methods & circumvention (Paolo Perego)<br />
<br />
===.NET===<br />
<br />
===PHP===<br />
<br />
Assigned to Andrew van der Stock<br />
<br />
===MySQL===<br />
<br />
Assigned to Andrew van der Stock<br />
<br />
===Stored Procs===<br />
<br />
<br />
===C/C++===<br />
<br />
# Memory management (Paolo Perego)<br />
# String management (Paolo Perego)<br />
# Secure access to file system items (Paolo Perego)<br />
<br />
==Automating Code Reviews==<br />
#Preface<br />
#Reasons for using automated tools<br />
#Education and cultural change<br />
#Tool Deployment Model<br />
<br />
==References==</div>
Mallory