This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "DefApp"
From OWASP
Dinis.cruz (talk | contribs) |
Bill Sempf (talk | contribs) |
||
| (2 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
| + | {{taggedDocument | ||
| + | | type=historical | ||
| + | | comment=These features are now built into the .NET Framework | ||
| + | | link=:Category:OWASP_.NET_Project | ||
| + | }} | ||
| + | |||
Partial port of ModSecurity to the .Net Platform which includes the following features: | Partial port of ModSecurity to the .Net Platform which includes the following features: | ||
| Line 5: | Line 11: | ||
* Validation of Cookies And Querystrings for the given rules, | * Validation of Cookies And Querystrings for the given rules, | ||
* Logging of the Response and Requests Of The Application | * Logging of the Response and Requests Of The Application | ||
| − | * Automatic detection of the CodePage used in the WebApplication and | + | * Automatic detection of the CodePage used in the WebApplication and prevention of the lowhigh unicode attack to the ASP.Net Applications. |
* Includes whole the features and some advances of the Validator.Net inside. | * Includes whole the features and some advances of the Validator.Net inside. | ||
| − | * The filtration process is fully | + | * The filtration process is fully customizable over Web Browser and The Validation Process can be tracked over Web Browser. |
* Includes Automatic Application Unhandled Error Detection and Logging. | * Includes Automatic Application Unhandled Error Detection and Logging. | ||
* No need to change the code of the Application. | * No need to change the code of the Application. | ||
Latest revision as of 04:04, 10 July 2014
This historical page is now part of the OWASP archive.
This page contains content that is outdated and is no longer being maintained. It is provided as a courtesy for individuals who are still using these technologies. This page may contain URLs that were once valid but may now link to sites or pages that no longer exist.
Please use the newer Edition(s) like Category:OWASP_.NET_Project
Comment: These features are now built into the .NET Framework
This page contains content that is outdated and is no longer being maintained. It is provided as a courtesy for individuals who are still using these technologies. This page may contain URLs that were once valid but may now link to sites or pages that no longer exist.
Please use the newer Edition(s) like Category:OWASP_.NET_Project
Comment: These features are now built into the .NET Framework
Partial port of ModSecurity to the .Net Platform which includes the following features:
Download: Owasp_DefApp.zip
- Validation of Cookies And Querystrings for the given rules,
- Logging of the Response and Requests Of The Application
- Automatic detection of the CodePage used in the WebApplication and prevention of the lowhigh unicode attack to the ASP.Net Applications.
- Includes whole the features and some advances of the Validator.Net inside.
- The filtration process is fully customizable over Web Browser and The Validation Process can be tracked over Web Browser.
- Includes Automatic Application Unhandled Error Detection and Logging.
- No need to change the code of the Application.
- Implemented as a HttpModule.
- Integrates with existing ASP.Net Web Applications
- Can be easily configured using web.config
