This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit

Category talk:OWASP Top Ten Project

Jump to: navigation, search

Is there a 2006 version, or a 2007 in the works? --Purpleslog 17:21, 7 December 2006 (EST)

Stay tuned, a new version will be out in early 2007.

Am I the only one that finds the fact that this list is a wiki funny? Also, what's with all the mixed content errors? --Owaspsucks 15:42, 27 April 2007 (EDT)

Hi there, I came here to ask this question but found it already there, and wondering if there is someone who can answer this question. The question is: Is there a 2006 version?

If I may develop the question, and ask: I suppose there is a Top-10 list for the year 2005. Has it been done? And if yes it has, then where is it?


Claim relating to the Top Ten

In the release announcement for the Lift framework, version 2.1 ( there is a claim:

"Secure by default... Lift apps are resistant to the OWASP top 10 vulnerabilities including XSS, XSRF, and parameter tampering"

I believe the claim is made in good faith. I was just wondering if something like this merited a mention somewhere on this page.

Donald McLean 22:00, 29 September 2010 (UTC)