This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Code Review Guide Table of Contents"
From OWASP
(→Java) |
(→Java) |
||
Line 38: | Line 38: | ||
#[[Java applet code review]] | #[[Java applet code review]] | ||
#[[Java server (J2EE) code review]] | #[[Java server (J2EE) code review]] | ||
− | + | #[[Inner classes - want to delete this]] | |
− | #[[Inner classes]] | + | #[[Class comparison - want to delete this]] |
− | #[[Class comparison]] | + | #[[Cloneable classes - want to delete this]] |
− | #[[Cloneable classes]] | + | #[[Serializable classes - want to delete this]] |
− | #[[Serializable classes]] | + | #[[Package scope and encapsulation - want to delete this]] |
− | #[[Package scope and encapsulation]] | + | #[[Mutable objects - want to delete this]] |
− | #[[Mutable objects]] | + | #[[Native Methods - want to delete this]] |
− | #[[Native Methods]] | + | #[[Private methods & circumvention - want to delete this]] |
− | #[[Private methods & circumvention]] | + | #[[Static Fields - want to delete this]] |
− | #[[Static Fields]] | ||
− | |||
===.NET=== | ===.NET=== |
Revision as of 21:30, 21 January 2007
Guide History
Methodology
Design review
Examples by Vulnerability
- Reviewing Code for Buffer Overruns and Overflows
- Reviewing Code for OS Injection
- Reviewing Code for SQL Injection
- Reviewing Code for Data Validation
- Reviewing code for XSS issues
- Reviewing Code for Error Handling
- Reviewing Code for Logging Issues
- Reviewing The Secure Code Environment
- Transaction Analysis
- Authorization
- Authentication
- Session Integrity
- Cross Site Request Forgery
- Cryptography
- Dangerous HTTP Methods
- Race Conditions
Language specific best practice
Java
- Java overview
- Java applet code review
- Java server (J2EE) code review
- Inner classes - want to delete this
- Class comparison - want to delete this
- Cloneable classes - want to delete this
- Serializable classes - want to delete this
- Package scope and encapsulation - want to delete this
- Mutable objects - want to delete this
- Native Methods - want to delete this
- Private methods & circumvention - want to delete this
- Static Fields - want to delete this