Working Sessions XSS Frameworks - Revision history

Sarah Baso: Redirected page to Summit 2011 Working Sessions/Session009

2010-12-19T11:45:31Z

Redirected page to Summit 2011 Working Sessions/Session009

Justin42 at 00:37, 7 December 2010

2010-12-07T00:37:45Z

Justin42: /* Working Session Participants */

2010-12-07T00:32:07Z

‎Working Session Participants

Justin42 at 00:26, 7 December 2010

2010-12-07T00:26:55Z

Justin42 at 00:24, 7 December 2010

2010-12-07T00:24:21Z

Justin42 at 00:18, 7 December 2010

2010-12-07T00:18:07Z

Sarah Baso at 04:46, 3 December 2010

2010-12-03T04:46:05Z

Sarah Baso at 04:45, 3 December 2010

2010-12-03T04:45:08Z

Sarah Baso: moved XSS - Frameworks to Working Sessions XSS Frameworks

2010-12-02T23:11:32Z

moved XSS - Frameworks to Working Sessions XSS Frameworks

Sarah Baso at 17:25, 2 December 2010

2010-12-02T17:25:13Z

← Older revision		Revision as of 11:45, 19 December 2010
Line 1:		Line 1:
−	[~~http://www.owasp.org/index.php/Summit_2011 '''Global Summit 2011 Home Page''']<br> [http://www.owasp.org/index.php/Summit_2011_Schedule '''Global Summit 2011 Schedule''']<br>~~ [~~http://www.owasp.org/index.php/~~Summit_2011_Working_Sessions ~~'''Global Summit 2011 Working Sessions''']~~	+	#REDIRECT [[Summit_2011_Working_Sessions/Session009]]
−
−	~~{\| border="0" align="center" style="width: 100%;"~~
−	\|-
−	! align="center" colspan="7" style="background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;" \| <font color="black">'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology\|'''Please see here the general frame of rules''']].</font>
−	\|}
−
−	~~{\| border="0" align="center" style="width: 100%;"~~
−	\|-
−	~~! align="center" colspan="7" style="background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;" \| <font color="white">'''WORKING SESSION IDENTIFICATION'''</font>~~
−	\|-
−	~~\| align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" \| '''Work Session Name'''~~
−	~~\| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \| <font color="black"><span style="font-weight: bold;">XSS and the Frameworks</span></font> <br>~~
−	\|-
−	~~\| align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" \| '''Short Work Session Description'''~~
−	\| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \| Can we work with the common web frameworks to prevent XSS at the framework level? If the framework a developer uses handles the most common cases of XSS occurring, the overall prevalence of XSS will be reduced significantly.
−	\|-
−	~~\| align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" \| '''Related Projects (if any)'''~~
−	\| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \| [http://www.owasp.org/index.php/Working_Sessions_XSS_AwarnessResourcesPartnerships Awareness, Resources and Partnerships]
−	\|-
−	~~\| align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" \| '''Email Contacts & Roles'''~~
−	~~\| align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \| '''Chair'''<br>[mailto:justin.clarke@owasp.org '''Justin Clarke''']~~
−	~~\| align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \| '''Secretary'''<br>~~
−	\| align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \| '''Mailing list'''<br>[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']
−	\|}
−
−	~~{\| border="0" align="center" style="width: 100%;"~~
−	\|-
−	~~! align="center" colspan="7" style="background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;" \| <font color="white">'''WORKING SESSION SPECIFICS'''</font>~~
−	\|-
−	~~\| align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" \| '''Objectives'''~~
−	\| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \| <font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font>
−	~~# Work on how OWASP can engage with the major web frameworks to move towards a "secure by default" stance~~
−	~~# Work on OWASP resources to provide patches/design approaches in conjunction with the frameworks~~
−	\|-
−	~~\| align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" \| '''Venue/Date&Time/Model'''~~
−	~~\| align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \| '''Venue'''<br>[http://www.owasp.org/index.php/Summit_2011 OWASP Global Summit Portugal 2011]~~
−	~~\| align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \|~~
−	~~'''Date&Time'''~~
−
−	~~\| align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \| '''Discussion Model'''<br>"Participants + Attendees"~~
−	\|}
−
−	~~{\| border="0" align="center" style="width: 100%;"~~
−	\|-
−	~~! align="center" colspan="7" style="background: none repeat scroll 0% 0% white; color: white;" \| <font color="black"></font> <br>~~
−	\|}
−
−	~~{\| border="0" align="center" style="width: 100%;"~~
−	\|-
−	~~! align="center" colspan="7" style="background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;" \| <font color="white">'''WORKING SESSION OPERATIONAL RESOURCES'''</font>~~
−	\|-
−	~~\| align="center" style="width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \| Projector, whiteboards, markers, Internet connectivity, power~~
−	\|}
−
−	~~{\| border="0" align="center" style="width: 100%;"~~
−	\|-
−	~~! align="center" colspan="7" style="background: none repeat scroll 0% 0% white; color: white;" \| <font color="black"></font> <br>~~
−	\|}
−
−	~~{\| border="0" align="center" style="width: 100%;"~~
−	\|-
−	~~! align="center" colspan="7" style="background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;" \| <font color="white">'''WORKING SESSION ADDITIONAL DETAILS'''</font>~~
−	\|-
−	~~\| align="left" style="width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" \|~~
−	*'''Related resources:''' [[OWASP Working Session - Browser Security Letters]]
−	*'''Frameworks to invite:''' .NET, Struts, Spring, Ruby on Rails
−
−	~~<br>~~
−
−	\|}
−
−	~~{\| border="0" align="center" style="width: 100%;"~~
−	\|-
−	~~! align="center" colspan="3" style="background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;" \| '''WORKING SESSION OUTCOMES'''~~
−	\|-
−	~~\| align="center" style="width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);" \| Statements, Initiatives or Decisions~~
−	~~\| align="center" style="width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);" \| '''Proposed by Working Group'''~~
−	~~\| align="center" style="width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);" \| '''Approved by OWASP Board'''~~
−	\|-
−	~~\| align="center" style="width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" \| <br>~~
−	~~\| align="center" style="width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);" \|~~
−	~~\| align="center" style="width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);" \| After the Board Meeting - fill in here.~~
−	\|-
−	~~\| align="center" style="width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" \| <br>~~
−	~~\| align="center" style="width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);" \|~~
−	~~\| align="center" style="width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);" \| After the Board Meeting - fill in here.~~
−	\|}
−
−	~~== Working Session Participants ==~~
−
−	~~{{:Template:Summit 2011 Working Sessions Attendee/Columns}}~~
−	~~{{:Summit_2011_Attendee/Attendee008 \| Summit 2011 Working Sessions Attendee/Rows_Browser_Security}}~~
−	~~{{:Summit_2011_Attendee/Attendee052 \| Summit 2011 Working Sessions Attendee~~/~~Rows_Browser_Security}}~~
−
−	\|}
−	~~<br>~~
−	~~[[Category:OWASP_Working_Session]] [[Category:Summit_2011~~]]

@@ Line 11: / Line 11: @@
 |-
 | align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Work Session Name'''
-| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | <font color="black"><span style="font-weight: bold;">XSS - Frameworks</span></font> <br>
+| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | <font color="black"><span style="font-weight: bold;">XSS and the Frameworks</span></font> <br>
 |-
 | align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Short Work Session Description'''

@@ Line 90: / Line 90: @@
 == Working Session Participants  ==
-(Add you name by editing this table. On your the right, just above the this frame, you have the option to edit)
+{{:Template:Summit 2011 Working Sessions Attendee/Columns}}
 |}
+<br>
 [[Category:OWASP_Working_Session]] [[Category:Summit_2011]]

@@ Line 64: / Line 64: @@
 |-
 | align="left" style="width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" |
-*'''Related resources:'''
+*'''Related resources:'''  [[OWASP Working Session - Browser Security Letters]]
-*'''Frameworks to invite:'''
+*'''Frameworks to invite:''' .NET, Struts, Spring, Ruby on Rails
 <br>

@@ Line 17: / Line 17: @@
 |-
 | align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Related Projects (if any)'''
-| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | <br>
+| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | [http://www.owasp.org/index.php/Working_Sessions_XSS_AwarnessResourcesPartnerships Awareness, Resources and Partnerships]
 |-
 | align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Email Contacts &amp; Roles'''
-| align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | '''Chair'''<br>
+| align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | '''Chair'''<br>[mailto:justin.clarke@owasp.org '''Justin Clarke''']
 | align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | '''Secretary'''<br>
 | align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | '''Mailing list'''<br>[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']
@@ Line 31: / Line 31: @@
 | align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Objectives'''
 | align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | <font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font>
 |-
 | align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Venue/Date&amp;Time/Model'''

@@ Line 1: / Line 1: @@
-[http://www.owasp.org/index.php/Summit_2011 ''' Global Summit 2011 Home Page''']<br>
+[http://www.owasp.org/index.php/Summit_2011 '''Global Summit 2011 Home Page''']<br> [http://www.owasp.org/index.php/Summit_2011_Schedule '''Global Summit 2011 Schedule''']<br> [http://www.owasp.org/index.php/Summit_2011_Working_Sessions '''Global Summit 2011 Working Sessions''']
 {| border="0" align="center" style="width: 100%;"
@@ Line 16: / Line 14: @@
 |-
 | align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Short Work Session Description'''
-| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | What is the standard framework for XSS?
+| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | Can we work with the common web frameworks to prevent XSS at the framework level?  If the framework a developer uses handles the most common cases of XSS occurring, the overall prevalence of XSS will be reduced significantly.
 |-
 | align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Related Projects (if any)'''
@@ Line 32: / Line 30: @@
 |-
 | align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Objectives'''
 | align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | <font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font>
 |-
 | align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Venue/Date&amp;Time/Model'''
@@ Line 66: / Line 63: @@
 | align="left" style="width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" |
 *'''Related resources:'''
 *'''Frameworks to invite:'''
 |}
@@ Line 179: / Line 177: @@
 If needed add here more lines.
-[[Category:OWASP_Working_Session]]
+[[Category:OWASP_Working_Session]] [[Category:Summit_2011]]

@@ Line 14: / Line 14: @@
 |-
 | align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Short Work Session Description'''
-| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | What is the sandard fromework for XSS?
+| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | What is the standard framework for XSS?
 |-
 | align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Related Projects (if any)'''
@@ Line 30: / Line 30: @@
 |-
 | align="center" style="width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | '''Objectives'''
-| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | <font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black">
+| align="left" colspan="6" style="width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | <font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font><font color="black"></font>
 |-
@@ Line 39: / Line 37: @@
 | align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" |
 '''Date&amp;Time'''
 | align="center" style="width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" | '''Discussion Model'''<br>"Participants + Attendees"
@@ Line 67: / Line 63: @@
 |-
 | align="left" style="width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);" |
-*'''Related resources:''' [[OWASP Working Session - Browser Security Letters]]
+*'''Related resources:'''
-*'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc.
+*'''Frameworks to invite:'''
-**10 Oct: "Open Letter to Frameworks (version for open mailing lists)" sent to
 |}
@@ Line 85: / Line 78: @@
 |-
 | align="center" style="width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | <br>
-| align="center" style="width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);" | Actionable advice for each individual frameworks .
+| align="center" style="width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);" |
 | align="center" style="width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);" | After the Board Meeting - fill in here.
 |-
 | align="center" style="width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | <br>
-| align="center" style="width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);" | Identify points-of-contact for frameworks.
+| align="center" style="width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);" |
 | align="center" style="width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);" | After the Board Meeting - fill in here.
 |}

← Older revision	Revision as of 23:11, 2 December 2010
(No difference)

@@ Line 1: / Line 1: @@
 [http://www.owasp.org/index.php/Summit_2011 ''' Return to the Global Summit 2011 Home Page''']<br>
-[http://www.owasp.org/index.php/Summit_2011#tab=Schedule ''' Return to the Global Summit 2011 Schedule''']
+[http://www.owasp.org/index.php/Summit_2011_Schedule ''' Return to the Global Summit 2011 Schedule''']
 {| border="0" align="center" style="width: 100%;"
 |-