Secure Coding Cheat Sheet - Revision history

Dominique RIGHETTO: Migration to GitHub of the project

2019-02-16T10:26:02Z

Migration to GitHub of the project

Dominique RIGHETTO: Migration to GitHub of the project

2019-02-16T10:24:48Z

Migration to GitHub of the project

Dominique RIGHETTO: Add the DELETE marker. Refer to CS cleanup phase

2018-08-25T09:22:37Z

Add the DELETE marker. Refer to CS cleanup phase

Dominique RIGHETTO: Add Other Cheatsheets marker for the book

2018-05-26T08:03:38Z

Add Other Cheatsheets marker for the book

Jmanico: removed the empty secure deployment

2017-04-18T19:03:21Z

removed the empty secure deployment

Jmanico at 22:17, 13 January 2016

2016-01-13T22:17:05Z

Jmanico at 22:16, 13 January 2016

2016-01-13T22:16:39Z

Shruti kulkarni at 16:26, 8 January 2016

2016-01-08T16:26:38Z

Shruti kulkarni: /* Concurrancy and Race Conditions */

2016-01-08T16:14:30Z

‎Concurrancy and Race Conditions

Shruti kulkarni: /* Directory Listing */

2016-01-08T16:14:16Z

‎Directory Listing

← Older revision		Revision as of 10:26, 16 February 2019
Line 95:		Line 95:

	Please see https://www.owasp.org/index.php/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet		Please see https://www.owasp.org/index.php/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet
−
−	~~= Other Cheatsheets =~~
−
−	~~{{Cheatsheet_Navigation}}~~
−
−	~~[[Category:Cheatsheets]]~~

	{{taggedDocument\| type=delete\| comment=Tagged via fixme/delete.}}		{{taggedDocument\| type=delete\| comment=Tagged via fixme/delete.}}

← Older revision		Revision as of 10:24, 16 February 2019
Line 1:		Line 1:
		+	<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:Cheatsheets-header.jpg\|link=]]</div>
		+
		+	__NOTOC__
		+
		+	= IMPORTANT =
		+
		+	The Cheat Sheet Series project has been moved to [https://github.com/OWASP/CheatSheetSeries GitHub]!
		+
		+	An [https://github.com/OWASP/CheatSheetSeries/issues/13 open discussion] is pending about to exclude or not this cheat sheet of the V2 of the project.
		+
	= Introduction =		= Introduction =
	The goal of this document is to create high level guideline for secure coding practices. The goal is to keep the overall size of the document condensed and easy to digest. Individuals seeking addition information on the specific areas should refer to the included links to learn more.		The goal of this document is to create high level guideline for secure coding practices. The goal is to keep the overall size of the document condensed and easy to digest. Individuals seeking addition information on the specific areas should refer to the included links to learn more.

← Older revision		Revision as of 09:22, 25 August 2018
Line 91:		Line 91:

	[[Category:Cheatsheets]]		[[Category:Cheatsheets]]
		+
		+	{{taggedDocument\| type=delete\| comment=Tagged via fixme/delete.}}

@@ Line 86: / Line 86: @@
 Please see https://www.owasp.org/index.php/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet
-= References =
+= Other Cheatsheets =
 {{Cheatsheet_Navigation}}
 [[Category:Cheatsheets]]

← Older revision		Revision as of 19:03, 18 April 2017
Line 57:		Line 57:

	Please see https://www.owasp.org/index.php/Session_Management_Cheat_Sheet#Cookies		Please see https://www.owasp.org/index.php/Session_Management_Cheat_Sheet#Cookies
−
−	~~= Secure Deployment =~~
−
−	~~Please see https://www.owasp.org/index.php/Input_Validation_Cheat_Sheet#Secure_Deployment~~

	= Unvalidated Redirects and Forwards Cheat Sheet =		= Unvalidated Redirects and Forwards Cheat Sheet =

← Older revision		Revision as of 22:17, 13 January 2016
Line 1:		Line 1:
−	~~= DRAFT CHEAT SHEET - WORK IN PROGRESS =~~
	= Introduction =		= Introduction =
	The goal of this document is to create high level guideline for secure coding practices. The goal is to keep the overall size of the document condensed and easy to digest. Individuals seeking addition information on the specific areas should refer to the included links to learn more.		The goal of this document is to create high level guideline for secure coding practices. The goal is to keep the overall size of the document condensed and easy to digest. Individuals seeking addition information on the specific areas should refer to the included links to learn more.

@@ Line 11: / Line 11: @@
 Why should you be having a secure coding policy? It helps in maintaining consistency across organisation and helps in vertical and horizontal scaling of usage of standards for web development projects.
-= Authentication=
+= User Authentication =
 Please see https://www.owasp.org/index.php/Authentication_Cheat_Sheet#Utilize_Multi-Factor_Authentication
-=== Password Complexity ===
+= Password Complexity =
 Please see [https://www.owasp.org/index.php/Authentication_Cheat_Sheet#Implement_Proper_Password_Strength_Controls https://www.owasp.org/index.php/Authentication_Cheat_Sheet#Implement_Proper_Password_Strength_Controls].
@@ Line 69: / Line 67: @@
 Please see https://www.owasp.org/index.php/Unvalidated_Redirects_and_Forwards_Cheat_Sheet
-= Common Vulnerabilities =
+= SQL Injection =
 Please see https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet
-== Cross Site Scripting ==
+= Cross Site Scripting =
 Please see https://www.owasp.org/index.php/DOM_based_XSS_Prevention_Cheat_Sheet
@@ Line 83: / Line 79: @@
 Please see https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet
-== Cross Site Request Forgery ==
+= Cross Site Request Forgery =
 Please see https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet
-== Preventing Malicious Site Framing (ClickJacking) ==
+= Preventing Malicious Site Framing (ClickJacking) =
 Please see https://www.owasp.org/index.php/Clickjacking_Defense_Cheat_Sheet#Defending_with_X-Frame-Options_Response_Headers
-== Insecure Direct Object references ==
+= Insecure Direct Object references =
 Please see https://www.owasp.org/index.php/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet
-== References ==
+= References =
 {{Cheatsheet_Navigation}}
 [[Category:Cheatsheets]]

← Older revision		Revision as of 16:14, 8 January 2016
Line 95:		Line 95:

	https://www.owasp.org/index.php/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet		https://www.owasp.org/index.php/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet
−
−	~~== Concurrancy and Race Conditions ==~~
−
−	* Use a locking mechanism to lock shared resources
−	* Obtain a lock on shared resources before it is read

	== References ==		== References ==