This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Summit 2011 Working Sessions/Session027/Deliverable 3"

From OWASP
Jump to: navigation, search
 
(One intermediate revision by the same user not shown)
Line 1: Line 1:
== '''Deliverable 3''' ==
+
= '''Deliverable 3''' =
  
'''An open letter and offer of support to framework developers to think about their security and consider what is available in ESAPI.'''  
+
'''Implementation Guide for Framework Developers to integrate Output Encoding'''  
  
To be filled in.
+
= WS Notes =
 +
 
 +
What we need from framework developers
 +
 
 +
• Contextual Output Encoding that is easy for developers to use
 +
• Text Box: Special Case
 +
• Output Encoding must happen at the view layer
 +
• Granular Output Tags

Latest revision as of 01:28, 12 February 2011

Deliverable 3

Implementation Guide for Framework Developers to integrate Output Encoding

WS Notes

What we need from framework developers

• Contextual Output Encoding that is easy for developers to use • Text Box: Special Case • Output Encoding must happen at the view layer • Granular Output Tags