Top 10-2017 Release Notes - Revision history

T.Gigler: deleted space to BottomAdvancedTemplate

2018-02-04T12:21:24Z

deleted space to BottomAdvancedTemplate

T.Gigler: Editorial changes (table, 'A1-')

2017-12-22T12:33:25Z

Editorial changes (table, 'A1-')

T.Gigler: Prepare OWASP Top 10-2017 Release (Content)

2017-12-16T22:40:39Z

Prepare OWASP Top 10-2017 Release (Content)

Show changes

T.Gigler: T.Gigler moved page Top 10 2017-Release Notes to Top 10-2017 Release Notes: Prepare OWASP Top 10-2017 Release

2017-12-12T20:33:38Z

T.Gigler moved page Top 10 2017-Release Notes to Top 10-2017 Release Notes: Prepare OWASP Top 10-2017 Release

T.Gigler: underlined all links, created a link at references to Top 10 in the paragraph 'What Changed From 2013 to 2017?'

2017-04-23T17:02:46Z

underlined all links, created a link at references to Top 10 in the paragraph 'What Changed From 2013 to 2017?'

Neil Smithline: Created page with "{{Top_10_2013:TopTemplate |usenext=2013NextLink |next={{Top_10:LanguageFile|text=risk|year=2017|language=en}} |useprev=2013PrevLink |prev={{Top_10:LanguageFile..."

2017-04-17T01:23:52Z

Created page with "{{Top_10_2013:TopTemplate |usenext=2013NextLink |next={{Top_10:LanguageFile|text=risk|year=2017|language=en}} |useprev=2013PrevLink |prev={{Top_10:LanguageFile..."

New page

{{Top_10_2013:TopTemplate
|usenext=2013NextLink
|next={{Top_10:LanguageFile|text=risk|year=2017|language=en}}
|useprev=2013PrevLink
|prev={{Top_10:LanguageFile|text=introduction|year=2017|language=en}}
|year=2017
|language=en
}}

{{Top_10:SubsectionTableBeginTemplate|type=main}}{{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|position=firstWhole|title={{Top_10:LanguageFile|text=whatChangedFrom2010to2013|year=2017|language=en}}|width=100%|year=2017|language=en}}
The threat landscape for applications and APIs constantly changes. Key factors in this evolution are the rapid adoption of new
technologies (including cloud, containers, and APIs), the acceleration and automation of software development processes like
Agile and DevOps, the explosion of third-party libraries and frameworks, and advances made by attackers. These factors
frequently make applications and APIs more difficult to analyze, and can significantly change the threat landscape. To keep pace,
we periodically update the OWASP Top 10. In this 2017 release, we made the following changes:
<ol>
<li>We merged 2013-A4: Insecure Direct Object References and 2013-A7: Missing Function Level Access Control back into 2017-A4: Broken Access Control.

o     In 2007, we split Broken Access Control into these two categories to bring more attention to each half of the access
control problem (data and functionality). We no longer feel that is necessary so we merged them back together.
</li></li>
<li>We added 2017-A7: Insufficient Attack Protection:

+     For years, we’ve considered adding insufficient defenses against automated attacks. Based on the data call, we see that
the majority of applications and APIs lack basic capabilities to detect, prevent, and respond to both manual and
automated attacks. Application and API owners also need to be able to deploy patches quickly to protect against attacks.
</li></li>
<li>We added 2017-A10: Underprotected APIs:

+     Modern applications and APIs often involve rich client applications, such as JavaScript in the browser and mobile apps,
that connect to an API of some kind (SOAP/XML, REST/JSON, RPC, GWT, etc.). These APIs are often unprotected and
contain numerous vulnerabilities. We include it here to help organizations focus on this major emerging exposure.
</li></li>
<li>We dropped: 2013-A10: Unvalidated Redirects and Forwards:

-     In 2010, we added this category to raise awareness of this problem. However, the data shows that this issue isn’t as
prevalent as expected. So after being in the last two releases of the Top 10, this time it didn’t make the cut.

</li></li>
</ol>
NOTE: The T10 is organized around major risk areas, and they are not intended to be airtight, non-overlapping, or a strict
taxonomy. Some of them are organized around the attacker, some the vulnerability, some the defense, and some the
asset. Organizations should consider establishing initiatives to stamp out these issues.

{{Top_10:SubsectionTableEndTemplate}}

<center>
{| style="width: 99%; align:center; text-align:center; border: 2px solid #4a1647; background-color:#F2F2F2; padding=2;"
|- style="background-color: #4a1647; color: #FFFFFF;"
! OWASP Top 10 - 2013 (Previous Version) !! OWASP Top 10 - 2017 (Current Version)
|- style="background-color: #FFFFFF;"
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2013}}|A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2013}}]]
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2017}}|A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2017}}]]
|- style="background-color: #FFFFFF;"
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2013}}|A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2013}}]]
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2017}}|A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2017}}]]
|- style="background-color: #FFFFFF;"
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2013}}|A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2013}}]]
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2017}}|A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2017}}]]
|- style="background-color: #F2F1FF;"
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}|A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}]] - Merged with A7
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}|A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}]] (Original category in 2003/2004)
|- style="background-color: #FFFFFF;"
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2013}}|A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2013}}]]
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}|A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}]]
|- style="background-color: #FFFFFF;"
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2013}}|A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2013}}]]
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2017}}|A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2017}}]]
|- style="background-color: #F2F1FF;"
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}|A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}]] - Merged with A4
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2017}}|A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2017}}]] (NEW)
|- style="background-color: #FFFFFF;"
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}|A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}]]
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2017}}|A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2017}}]]
|- style="background-color: #FFFFFF;"
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2013}}|A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2013}}]]
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2017}}|A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2017}}]]
|- style="background-color: #F2F1FF;"
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}|A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}]] (Dropped)
| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}|A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}]] (NEW)
|}
</center>
{{Top_10_2013:BottomTemplate
|usenext=2013NextLink
|next={{Top_10:LanguageFile|text=risk|year=2017|language=en}}
|useprev=2013PrevLink
|prev={{Top_10:LanguageFile|text=introduction|year=2017|language=en}}
|year=2017
|language=en
}}

@@ Line 73: / Line 73: @@
 | style="font-size:120%; text-align:center; background-color: #FFFFFF;" | <b>&#9746;</b> <!--- dropped risk --->
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}|A10:2017-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}]]</u> [NEW, Community]
 |}
-</center>
+</center> {{Top_10_2013:BottomAdvancedTemplate
+     |type=text
      |useprev=2017PrevLink
      |prev={{Top_10:LanguageFile|text=introduction|year=2017|language=en}}

@@ Line 16: / Line 16: @@
 ===New issues, supported by data===
-* <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}|A4:2017-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}]]</u></b> is a new category primarily supported by source code analysis security testing tools (<u>[[Source_Code_Analysis_Tools|SAST]]</u>) data sets.
+* <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}|A4:2017-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}]]</u></b> is a new category primarily supported by (<u>[[Source_Code_Analysis_Tools|source code analysis security testing tools]]</u> (SAST) data sets.
 ===New issues, supported by the community===
@@ Line 24: / Line 24: @@
 ===Merged or retired, but not forgotten===
-* <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}|A4: {{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}]]</u></b> and <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}|A7: {{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}]]</u></b> merged into <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}|A5:2017-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}]]</u></b>.
+* <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}|A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}]]</u></b> and <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}|A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}]]</u></b> merged into <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}|A5:2017-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}]]</u></b>.
-* <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}|A8: {{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}]]</u></b>, as many frameworks include <u>[[Cross-Site_Request_Forgery_(CSRF)|CSRF defenses]]</u>, it was found in only 5% of applications.
+* <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}|A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}]]</u></b>, as many frameworks include <u>[[Cross-Site_Request_Forgery_(CSRF)|CSRF defenses]]</u>, it was found in only 5% of applications.
-* <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}|A10: {{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}]]</u></b>, while found in approximately in 8% of applications, it was edged out overall by XXE.
+* <b><u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}|A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}]]</u></b>, while found in approximately in 8% of applications, it was edged out overall by XXE.
 {{Top_10:SubsectionTableEndTemplate}}
 <center>
-{| style="width: 99%; align:center; text-align:center; border: 2px solid #4a1647; background-color:#F2F2F2; padding=2;"
+{| style="width: 99%; align:center; text-align:left; border: 2px solid #4a1647; background-color:#F2F2F2; padding=2;"
-|- style="background-color: #4a1647; color: #FFFFFF;"
+|- style="background-color: #4a1647; color: #FFFFFF; text-align:center;"
-! OWASP Top 10 - 2013 (Previous Version) !! OWASP Top 10 - 2017 (Current Version)
+! OWASP Top 10 - 2013 (Previous Version) !! <b>&rArr;</b> !! OWASP Top 10 - 2017 (Current Version)
 |- style="background-color: #FFFFFF;"
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2013}}|A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2013}}]]</u>
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2017}}|A1:2017-{{Top_10_2010:ByTheNumbers|1|language=en|year=2017}}]]</u>
 |- style="background-color: #FFFFFF;"
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2013}}|A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2013}}]]</u>
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2017}}|A2:2017-{{Top_10_2010:ByTheNumbers|2|language=en|year=2017}}]]</u>
 |- style="background-color: #FFFFFF;"
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2013}}|A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2013}}]]</u>
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2017}}|A3:2017-{{Top_10_2010:ByTheNumbers|3|language=en|year=2017}}]]</u>
 |- style="background-color: #F2F1FF;"
-| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}|A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}]]</u> - Merged with A7
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}|A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}]]</u> - [Merged + A7]
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}|A4:2017-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}]]</u> [NEW]
 |- style="background-color: #FFFFFF;"
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2013}}|A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2013}}]]</u>
-| <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}|A5:2017-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}]]</u> [Merged]
+| style="font-size:120%; text-align:center;" | <b>&#8664;</b> <!--- decreased risk --->
 |- style="background-color: #FFFFFF;"
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2013}}|A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2013}}]]</u>
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2017}}|A6:2017-{{Top_10_2010:ByTheNumbers|6|language=en|year=2017}}]]</u>
 |- style="background-color: #FFFFFF;"
-| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}|A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}]]</u> - Merged with A4
+| style="background-color: #F2F1FF;" | <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}|A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}]]</u> - [Merged + A4]
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2017}}|A7:2017-{{Top_10_2010:ByTheNumbers|7|language=en|year=2017}}]]</u>
 |- style="background-color: #F2F1FF;"
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}|A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}]]</u> [Dropped]
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2017}}|A8:2017-{{Top_10_2010:ByTheNumbers|8|language=en|year=2017}}]]</u> [NEW, Community]
 |- style="background-color: #FFFFFF;"
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2013}}|A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2013}}]]</u>
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2017}}|A9:2017-{{Top_10_2010:ByTheNumbers|9|language=en|year=2017}}]]</u>
 |- style="background-color: #F2F1FF;"
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}|A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}]]</u> [Dropped]
 | <u>[[{{Top_10:LanguageFile|text=documentRootTop10New|year=2017|language=en}}_A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}|A10:2017-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}]]</u> [NEW, Community]
 |}

@@ Line 15: / Line 15: @@
 we periodically update the OWASP Top 10. In this 2017 release, we made the following changes:
 <ol>
-<li>We merged 2013-A4: Insecure Direct Object References and 2013-A7: Missing Function Level Access Control back into 2017-A4: Broken Access Control.
+<li>We merged <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}|2013-A4: {{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}]]</u> and <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}|2013-A7: {{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}]]</u> back into <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}|2017-A4: {{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}]]</u>.
 <p style="padding-left: 2em; text-indent: -2em;">
 o&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;In 2007, we split Broken Access Control into these two categories to bring more attention to each half of the access
 control problem (data and functionality). We no longer feel that is necessary so we merged them back together.</p>
 </li></li>
-<li>We added 2017-A7: Insufficient Attack Protection:
+<li>We added <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2017}}|2017-A7: {{Top_10_2010:ByTheNumbers|7|language=en|year=2017}}]]</u>:
 <p style="padding-left: 2em; text-indent: -2em;">
 +&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For years, we’ve considered adding insufficient defenses against automated attacks. Based on the data call, we see that
@@ Line 26: / Line 26: @@
 automated attacks. Application and API owners also need to be able to deploy patches quickly to protect against attacks.</p>
 </li></li>
-<li>We added 2017-A10: Underprotected APIs:
+<li>We added <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}|2017-A10: {{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}]]</u>:
 <p style="padding-left: 2em; text-indent: -2em;">
 +&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Modern applications and APIs often involve rich client applications, such as JavaScript in the browser and mobile apps,
@@ Line 32: / Line 32: @@
 contain numerous vulnerabilities. We include it here to help organizations focus on this major emerging exposure.</p>
 </li></li>
-<li>We dropped: 2013-A10: Unvalidated Redirects and Forwards:
+<li>We dropped: <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}|2013-A10: {{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}]]</u>:
 <p style="padding-left: 2em; text-indent: -2em;">
 -&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;In 2010, we added this category to raise awareness of this problem. However, the data shows that this issue isn’t as
@@ Line 50: / Line 50: @@
 ! OWASP Top 10 - 2013 (Previous Version) !! OWASP Top 10 - 2017 (Current Version)
 |- style="background-color: #FFFFFF;"
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2013}}|A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2013}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2013}}|A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2013}}]]</u>
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2017}}|A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2017}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2017}}|A1-{{Top_10_2010:ByTheNumbers|1|language=en|year=2017}}]]</u>
 |- style="background-color: #FFFFFF;"
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2013}}|A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2013}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2013}}|A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2013}}]]</u>
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2017}}|A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2017}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2017}}|A2-{{Top_10_2010:ByTheNumbers|2|language=en|year=2017}}]]</u>
 |- style="background-color: #FFFFFF;"
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2013}}|A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2013}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2013}}|A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2013}}]]</u>
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2017}}|A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2017}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2017}}|A3-{{Top_10_2010:ByTheNumbers|3|language=en|year=2017}}]]</u>
 |- style="background-color: #F2F1FF;"
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}|A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}]] - Merged with A7
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}|A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2013}}]]</u> - Merged with A7
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}|A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}]] (Original category in 2003/2004)
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}|A4-{{Top_10_2010:ByTheNumbers|4|language=en|year=2017}}]]</u> (Original category in 2003/2004)
 |- style="background-color: #FFFFFF;"
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2013}}|A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2013}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2013}}|A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2013}}]]</u>
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}|A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}|A5-{{Top_10_2010:ByTheNumbers|5|language=en|year=2017}}]]</u>
 |- style="background-color: #FFFFFF;"
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2013}}|A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2013}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2013}}|A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2013}}]]</u>
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2017}}|A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2017}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2017}}|A6-{{Top_10_2010:ByTheNumbers|6|language=en|year=2017}}]]</u>
 |- style="background-color: #F2F1FF;"
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}|A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}]] - Merged with A4
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}|A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2013}}]]</u> - Merged with A4
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2017}}|A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2017}}]] (NEW)
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2017}}|A7-{{Top_10_2010:ByTheNumbers|7|language=en|year=2017}}]]</u> (NEW)
 |- style="background-color: #FFFFFF;"
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}|A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}|A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2013}}]]</u>
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2017}}|A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2017}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2017}}|A8-{{Top_10_2010:ByTheNumbers|8|language=en|year=2017}}]]</u>
 |- style="background-color: #FFFFFF;"
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2013}}|A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2013}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2013}}|A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2013}}]]</u>
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2017}}|A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2017}}]]
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2017}}|A9-{{Top_10_2010:ByTheNumbers|9|language=en|year=2017}}]]</u>
 |- style="background-color: #F2F1FF;"
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}|A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}]] (Dropped)
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2013|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}|A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2013}}]]</u> (Dropped)
-| [[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}|A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}]] (NEW)
+| <u>[[{{Top_10:LanguageFile|text=documentRootTop10|year=2017|language=en}}-A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}|A10-{{Top_10_2010:ByTheNumbers|10|language=en|year=2017}}]]</u> (NEW)
 |}
 </center>

← Older revision	Revision as of 20:33, 12 December 2017
(No difference)