OWASP Orizon Project XML - Revision history

Thesp0nge: /* Classes */

2008-12-07T23:11:13Z

‎Classes

2008-12-07T23:04:21Z

‎Classes

2008-12-07T22:45:12Z

‎Classes

2008-12-07T22:35:43Z

‎Classes

2008-12-07T22:35:17Z

‎Design check

2008-12-07T22:09:47Z

‎Design check

2008-12-07T22:04:35Z

‎Design check

2008-11-12T20:00:07Z

2008-11-12T19:56:25Z

2008-11-12T19:51:30Z

@@ Line 74: / Line 74: @@
    &lt;design subj="class" verb="has" direct_object="scope" value="public" /&gt;
-* attribute
+* attribute: an attribute can be if the class is inner or not
 == keyword_check, about keyword specific checks ==

@@ Line 63: / Line 63: @@
    If a security check needs to evaluate if a class extends org.owasp.orizon.About, the check can be written using the following notation
    &lt;design subj="class" verb="extends" value="org.owasp.orizon.About" /&gt;
 == keyword_check, about keyword specific checks ==

@@ Line 56: / Line 56: @@
    If we need to have our J2EE applications comprised of source files containing 5 classes each, this is the correspondent security check
    &lt;design subj="class" verb="counts" value="5" /&gt;
 == keyword_check, about keyword specific checks ==

@@ Line 55: / Line 55: @@
    If we need to have our J2EE applications comprised of source files containing 5 classes each, this is the correspondent security check
-   &lt;design subj="class" verb="counts" value="5" /&gt
+   &lt;design subj="class" verb="counts" value="5" /&gt;
 == keyword_check, about keyword specific checks ==

@@ Line 34: / Line 34: @@
 == Design check ==
-   This is a work in progress section. Actually I'm collecting all the security checks coming from other tools and trying to figure it out the XML schema to use to describe security checks.
+   This is a work in progress section. Actually I'm collecting all the security checks coming from other tools and trying to figure it out the XML schema to use to
    thesp0nge, 07.12.2008
@@ Line 41: / Line 42: @@
    &lt;design
          subj="class"
-         name=<i>ingored</i>
+         name=<i>ignored</i>
-         verb=[count|has_scope]
+         verb=[counts|contains|extends|implements|has]
          value=''the value being checked''
    &gt;
    &lt;/design&gt;
 == keyword_check, about keyword specific checks ==

@@ Line 11: / Line 11: @@
 The stats check XML schema has been changed from version 1.0, so this applies starting from version 1.1 and later
   &lt;stats
-      subj=[loc | loC]
+      subj=[code | comment | complexity]
       verb=[lt | gt | le | ge | ne | eq | ratio]
       [ direct_object= [loc | loC] ]
@@ Line 20: / Line 20: @@
 where:
 * Subject can be one of the following:
-** loc: line of code
+** code: line of code
-** loC: line of Comment
+** comment: line of comments
 * verb is the boolean comparison operator between the subject and the value: