Top 10 2013-Introduction - Revision history

T.Gigler: deleted a doubled 'language' paramater (avoids 'Category: Pages using duplicate arguments in template calls')

2017-04-23T20:30:55Z

deleted a doubled 'language' paramater (avoids 'Category: Pages using duplicate arguments in template calls')

Wichers at 16:24, 16 August 2016

2016-08-16T16:24:16Z

Wichers at 00:32, 31 July 2014

2014-07-31T00:32:54Z

Wichers at 22:25, 17 July 2014

2014-07-17T22:25:23Z

T.Gigler: {{Top_10:LanguageFile|text=acknowledgements -> 'text=attribution' ....

2013-06-17T21:18:19Z

{{Top_10:LanguageFile|text=acknowledgements -> 'text=attribution' ....

T.Gigler: added '|language=en' in "Top_10_2010:SubsectionAdvancedTemplate ... subsection=freetext ..."

2013-06-15T17:18:07Z

added '|language=en' in "Top_10_2010:SubsectionAdvancedTemplate ... subsection=freetext ..."

T.Gigler: one '| language=en' is enough per template-call

2013-06-15T17:14:53Z

one '| language=en' is enough per template-call

Neil Smithline at 20:05, 14 June 2013

2013-06-14T20:05:48Z

Neil Smithline at 20:03, 14 June 2013

2013-06-14T20:03:07Z

T.Gigler: added '|year=2013 |language=en, prev={{Top_10:LanguageFile...}}, |next={{Top_10:LanguageFile...}}' at Top/BottomTemplates and '|language=en' where it has been missing

2013-06-14T15:12:34Z

added '|year=2013 |language=en, prev={{Top_10:LanguageFile...}}, |next={{Top_10:LanguageFile...}}' at Top/BottomTemplates and '|language=en' where it has been missing

@@ Line 54: / Line 54: @@
      |type={{Top_10_2010:StyleTemplate}}
      |usenext=2013NextLink
-     |next={{Top_10:LanguageFile|text=releaseNotes|language=en|year=2013|language=en}}
+     |next={{Top_10:LanguageFile|text=releaseNotes|year=2013|language=en}}
      |useprev=2013PrevLink
-     |prev={{Top_10:LanguageFile|text=aboutOWASP|language=en|year=2013|language=en}}
+     |prev={{Top_10:LanguageFile|text=aboutOWASP|year=2013|language=en}}
      |year=2013
      |language=en
 }}

@@ Line 33: / Line 33: @@
 </center>
 We’d like to thank those organizations that contributed their vulnerability prevalence data to support the 2013 update:
-* [http://www.aspectsecurity.com/ Aspect Security] - [http://www.aspectsecurity.com/research-presentations/aspect-2013-global-application-security-risk-report Statistics]
+* [http://www.aspectsecurity.com/ Aspect Security] - [http://cdn2.hubspot.net/hub/315719/file-681702349-pdf/presentations/Aspect-2013-Global-AppSec-Risk-Report.pdf Statistics]
 * [http://www.hpenterprisesecurity.com/ HP] – Statistics from both [http://www.hpenterprisesecurity.com/collateral/whitepaper/HP2012CyberRiskReport_0313.pdf Fortify] and WebInspect
 * [http://www.mindedsecurity.com/ Minded Security] – [http://blog.mindedsecurity.com/2013/02/real-life-vulnerabilities-statistics.html Statistics]

@@ Line 33: / Line 33: @@
 </center>
 We’d like to thank those organizations that contributed their vulnerability prevalence data to support the 2013 update:
-* [http://www.aspectsecurity.com/ Aspect Security]
+* [http://www.aspectsecurity.com/ Aspect Security] - [http://www.aspectsecurity.com/research-presentations/aspect-2013-global-application-security-risk-report Statistics]
 * [http://www.hpenterprisesecurity.com/ HP] – Statistics from both [http://www.hpenterprisesecurity.com/collateral/whitepaper/HP2012CyberRiskReport_0313.pdf Fortify] and WebInspect
 * [http://www.mindedsecurity.com/ Minded Security] – [http://blog.mindedsecurity.com/2013/02/real-life-vulnerabilities-statistics.html Statistics]

@@ Line 28: / Line 28: @@
 {{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|position=right|title={{Top_10:LanguageFile|text=attribution|language=en}}|year=2013|language=en}}
-Thanks to [https://www.aspectsecurity.com/ Aspect Security] for initiating, leading, and updating the OWASP Top 10 since its inception in 2003, and to its primary authors: Jeff Williams and Dave Wichers.
+Thanks to [http://www.aspectsecurity.com/ Aspect Security] for initiating, leading, and updating the OWASP Top 10 since its inception in 2003, and to its primary authors: Jeff Williams and Dave Wichers.
 <center>
-[http://www.aspectsecurity.com https://www.owasp.org/images/d/d1/Aspect_logo.gif]
+[http://www.aspectsecurity.com https://www.owasp.org/images/5/51/Aspect_Logo.png]
 </center>
 We’d like to thank those organizations that contributed their vulnerability prevalence data to support the 2013 update:
-* [https://www.aspectsecurity.com/ Aspect Security]
+* [http://www.aspectsecurity.com/ Aspect Security]
 * [http://www.hpenterprisesecurity.com/ HP] – Statistics from both [http://www.hpenterprisesecurity.com/collateral/whitepaper/HP2012CyberRiskReport_0313.pdf Fortify] and WebInspect
 * [http://www.mindedsecurity.com/ Minded Security] – [http://blog.mindedsecurity.com/2013/02/real-life-vulnerabilities-statistics.html Statistics]

@@ Line 27: / Line 27: @@
-{{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|position=right|title={{Top_10:LanguageFile|text=acknowledgements|language=en}}|year=2013|language=en}}
+{{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|position=right|title={{Top_10:LanguageFile|text=attribution|language=en}}|year=2013|language=en}}
 Thanks to [https://www.aspectsecurity.com/ Aspect Security] for initiating, leading, and updating the OWASP Top 10 since its inception in 2003, and to its primary authors: Jeff Williams and Dave Wichers.
 <center>

@@ Line 8: / Line 8: @@
 }}
-{{Top_10:SubsectionTableBeginTemplate|type=main}}{{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|position=firstWhole|title={{Top_10:LanguageFile|text=welcome}}|year=2013|language=en}}
+{{Top_10:SubsectionTableBeginTemplate|type=main}}{{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|position=firstWhole|title={{Top_10:LanguageFile|text=welcome|language=en}}|year=2013|language=en}}
 Welcome to the OWASP Top 10 2013! This update broadens one of the categories from the 2010 version to be more inclusive of common, important vulnerabilities, and reorders some of the others based on changing prevalence data.  It also brings component security into the spotlight by creating a specific category for this risk, pulling it out of the obscurity of the fine print of the 2010 risk A6: Security Misconfiguration.
@@ Line 15: / Line 15: @@
 The primary aim of the OWASP Top 10 is to educate developers, designers, architects, managers, and organizations about the consequences of the most important web application security weaknesses. The Top 10 provides basic techniques to protect against these high risk problem areas – and also provides guidance on where to go from here.
-{{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|position=left|title={{Top_10:LanguageFile|text=warnings}}|year=2013|language=en}}
+{{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|position=left|title={{Top_10:LanguageFile|text=warnings|language=en}}|year=2013|language=en}}
 '''Don’t stop at 10.''' There are hundreds of issues that could affect the overall security of a web application as discussed in the [https://www.owasp.org/index.php/OWASP_Guide_Project  OWASP Developer’s Guide] and the [https://www.owasp.org/index.php/Cheat_Sheets  OWASP Cheat Sheet Series]. These are essential reading for anyone developing web applications. Guidance on how to effectively find vulnerabilities in web applications is provided in the [https://www.owasp.org/index.php/Category:OWASP_Testing_Project  OWASP Testing Guide] and the [https://www.owasp.org/index.php/Category:OWASP_Code_Review_Project  OWASP Code Review Guide].
@@ Line 27: / Line 27: @@
-{{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|position=right|title={{Top_10:LanguageFile|text=acknowledgements}}|year=2013|language=en}}
+{{Top_10_2010:SubsectionAdvancedTemplate|type={{Top_10_2010:StyleTemplate}}|subsection=freetext|position=right|title={{Top_10:LanguageFile|text=acknowledgements|language=en}}|year=2013|language=en}}
 Thanks to [https://www.aspectsecurity.com/ Aspect Security] for initiating, leading, and updating the OWASP Top 10 since its inception in 2003, and to its primary authors: Jeff Williams and Dave Wichers.
 <center>

@@ Line 22: / Line 22: @@
 '''Think positive.''' When you’re ready to stop chasing vulnerabilities and focus on establishing strong application security controls, OWASP has produced the [https://www.owasp.org/index.php/ASVS  Application Security Verification Standard (ASVS)] as a guide to organizations and application reviewers on what to verify.
-Use tools wisely. Security vulnerabilities can be quite complex and buried in mountains of code. In many cases, the most cost-effective approach for finding and eliminating these weaknesses is human experts armed with good tools.
+'''Use tools wisely.''' Security vulnerabilities can be quite complex and buried in mountains of code. In many cases, the most cost-effective approach for finding and eliminating these weaknesses is human experts armed with good tools.
 '''Push left.''' Focus on making security an integral part of your culture throughout your development organization. Find out more in the [https://www.owasp.org/index.php/Category:Software_Assurance_Maturity_Model  Open Software Assurance Maturity Model (SAMM)] and the [http://ruggedsoftware.org/  Rugged Handbook].