Category:Java - Revision history

Imifos: All pages moved categories, so this list is now empty

2017-11-10T21:55:44Z

All pages moved categories, so this list is now empty

Imifos: Removed mention of an inactive effort.

2017-11-10T10:49:30Z

Removed mention of an inactive effort.

Ari Elias-Bachrach: /* Validation */ adding apache commons validator

2016-11-04T17:26:16Z

‎Validation: adding apache commons validator

Jmanico: /* Validation */

2016-05-11T23:45:27Z

‎Validation

Jmanico: /* Validation */

2016-05-11T23:45:03Z

‎Validation

Jmanico: remover Jguard, not updated since 2013

2016-02-21T15:21:50Z

remover Jguard, not updated since 2013

Jmanico: /* Secure Coding Libraries */

2016-02-21T04:04:29Z

‎Secure Coding Libraries

Jmanico: /* Secure Coding Libraries */

2016-02-21T04:04:00Z

‎Secure Coding Libraries

Jmanico: defluffing

2016-02-21T03:55:53Z

defluffing

Jmanico: /* Access Control (Authentication and Authorization) */

2016-02-21T03:54:52Z

‎Access Control (Authentication and Authorization)

← Older revision		Revision as of 21:55, 10 November 2017
Line 244:		Line 244:
	'''IMPORTANT: all pages of these project are currently under review. A lot are outdated and are in the process of being removed or updated.'''		'''IMPORTANT: all pages of these project are currently under review. A lot are outdated and are in the process of being removed or updated.'''

−
−	~~(The pages in the "old" category "OWASP Java Project" have to be moved into the category "Java". Work is in progress).~~
−
−	~~<categorytree mode=pages>OWASP Java Project</categorytree>~~

@@ Line 30: / Line 30: @@
 See the "Tasks and Roadmap" tab for more information.
 | valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |
@@ Line 199: / Line 197: @@
 == Roadmap ==
 * Build Java and JVM security related net resources guide
 * The OWASP Java and JVM Technology Knowledge Base is principally about creating deep, rich guidance for Java and JVM developers using all kind of security resources. The idea is to have an effort of building a internet resource guide for everything around the JVM universe. Information, blogs, articles, tools, test servers and more. Important however is that this list is seriously curated.
@@ Line 245: / Line 242: @@
-'''IMPORTANT: all pages of these project are currently under review. A lot are outdated and are in the process of being removed or updated.''' The review effort is coordinated on this page: [[OWASP Java Project WIPRO 1 2015|Wiki Pages Review Operation - 2015/2016]].
+'''IMPORTANT: all pages of these project are currently under review. A lot are outdated and are in the process of being removed or updated.'''

@@ Line 157: / Line 157: @@
 * [http://www.sapia-oss.org/projects/vlad/home.html Vlad] stands for "validation". This projects indeed aims at offering a simple, high-level, extensible, generic validation framework that can easily be integrated into existing applications.
 * [https://www.owasp.org/index.php/Protect_FileUpload_Against_Malicious_File This OWASP article] and [https://github.com/righettod/document-upload-protection code snippet] proposes a way to protect a file upload feature against submission of files that may contain malicious code.
 = Resources =

@@ Line 156: / Line 156: @@
 == Validation ==
 * [http://www.sapia-oss.org/projects/vlad/home.html Vlad] stands for "validation". This projects indeed aims at offering a simple, high-level, extensible, generic validation framework that can easily be integrated into existing applications.
-* [https://www.owasp.org/index.php/Protect_FileUpload_Against_Malicious_File This OWASP article] and [https://github.com/righettod/document-upload-protection code snippet] proposes a way to protect a file upload feature against submission of files that may containing malicious code.
+* [https://www.owasp.org/index.php/Protect_FileUpload_Against_Malicious_File This OWASP article] and [https://github.com/righettod/document-upload-protection code snippet] proposes a way to protect a file upload feature against submission of files that may contain malicious code.
 = Resources =

@@ Line 156: / Line 156: @@
 == Validation ==
 * [http://www.sapia-oss.org/projects/vlad/home.html Vlad] stands for "validation". This projects indeed aims at offering a simple, high-level, extensible, generic validation framework that can easily be integrated into existing applications.
 = Resources =

@@ Line 143: / Line 143: @@
 == Access Control (Authentication and Authorization) ==
 * [http://oaccframework.org/ OACC] is an application security framework for Java designed for fine grained (object level) access control. OACC uses the abstraction of a ''resource'' for the application objects being secured. This key abstraction enables OACC to provide a rich API that includes grant, revoke and query capabilities for storing and managing the application's security relationships.
 * [http://picketlink.org/appsecurity/ PicketLink]  provides authentication, single sign on, permission based access control and other security features.

@@ Line 90: / Line 90: @@
 {| width="100%"
 |-
-| colspan="2" | [[CSRFGuard|OWASP CSRFGuard]]
+| colspan="2" | [[OWASP_AppSensor_Project|OWASP AppSensor]]
 |-
 | width="20" | &nbsp;
-| CSRFGuard is a Java library that implements a variant of the synchronizer token pattern to mitigate the risk of Cross-Site Request Forgery (CSRF) attacks.
+| The AppSensor project defines a conceptual framework and methodology that offers prescriptive guidance to implement intrusion detection and automated response into applications.
 |-
-| colspan="2" | [[OWASP_AppSensor_Project|OWASP AppSensor]]
+| colspan="2" | [[CSRFGuard|OWASP CSRFGuard]]
 |-
 | width="20" | &nbsp;
-| The AppSensor project defines a conceptual framework and methodology that offers prescriptive guidance to implement intrusion detection and automated response into applications.
+| CSRFGuard is a Java library that implements a variant of the synchronizer token pattern to mitigate the risk of Cross-Site Request Forgery (CSRF) attacks.
 |-
 | colspan="2" | [[OWASP_Java_Encoder_Project|OWASP Java Encoder Project]]

@@ Line 133: / Line 133: @@
 ==Enterprise==
-* [http://shiro.apache.org/ Apache Shiro] is a Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and easily secure any application – from the smallest mobile applications to the largest web and enterprise applications.
+* [http://shiro.apache.org/ Apache Shiro] is a Java security framework that performs authentication, authorization, cryptography, and session management.
-* [http://projects.spring.io/spring-security/ Spring Security] provides comprehensive security services for Java EE-based enterprise software applications. Services include authentication, authorization and protection against attacks like session fixation, clickjacking and cross site request forgery. There is a particular emphasis on supporting projects built using the Spring Framework, but it is a powerful security solution for standard Java EE applications as well.
+* [http://projects.spring.io/spring-security/ Spring Security] provides security services for Java EE-based enterprise software applications. Services include authentication, authorization and protection against attacks like session fixation, clickjacking and cross site request forgery.
 * [http://www.hdiv.org/ HDIV] A web application security framework that provides a number of functions.

@@ Line 138: / Line 138: @@
 == Access Control (Authentication and Authorization) ==
-* [http://sourceforge.net/projects/jguard jGuard] - jGuard is written in Java. Its goal is to provide a security framework based on JAAS (Java Authentication and Authorization Security). The framework is written for web and standalone applications, to easily provide solutions for access control problems.
+* [http://sourceforge.net/projects/jguard jGuard] is a Java security framework based on JAAS (Java Authentication and Authorization Security). The framework is written for web and standalone applications, to easily provide solutions for access control problems.
-* [http://oaccframework.org/ OACC] - OACC is an application security framework for Java designed for fine grained (object level) access control. OACC uses the abstraction of a ''resource'' for the application objects being secured. This key abstraction enables OACC to provide a rich API that includes grant, revoke and query capabilities for storing and managing the application's security relationships.
+* [http://oaccframework.org/ OACC] is an application security framework for Java designed for fine grained (object level) access control. OACC uses the abstraction of a ''resource'' for the application objects being secured. This key abstraction enables OACC to provide a rich API that includes grant, revoke and query capabilities for storing and managing the application's security relationships.
-* [http://picketlink.org/appsecurity/ PicketLink] - PicketLink provides authentication, single sign on, permission based access control and other security features.
+* [http://picketlink.org/appsecurity/ PicketLink]  provides authentication, single sign on, permission based access control and other security features.
 == Encryption ==